Answer: Role, Group

Identity-based policies can be attached to IAM users, IAM groups, and IAM roles. These policies define what actions those identities are allowed or denied to perform. In this question, the IAM principals that can have the policy attached are a Role (option A) and a Group (option B). Options such as Organization, Amazon EC2 resource, and Amazon ECS resource are not valid IAM principals for attaching identity-based policies.

Author: LeetQuiz Editorial Team