Which TWO of the following are valid methods to control network access to an Amazon RDS DB instance? (Select TWO.)