A SysOps administrator must grant a set of IAM users access to AWS services by attaching a policy to them, and also needs the ability to modify that policy and create new versions. Which combination of steps meets these requirements? (Choose two.)

To efficiently manage permissions for multiple users, adding them to an IAM group and attaching a policy to that group is the recommended approach. This allows for centralized management; any user added to the group automatically inherits the group's permissions. Creating a customer managed policy is essential because it allows the administrator to define, edit, and version the policy according to specific organizational needs. AWS managed policies are predefined by AWS and cannot be modified. Inline policies are attached directly to a user, group, or role and cannot be reused or easily versioned across multiple entities, making them impractical for managing a set of users. IAM service-linked roles are predefined by AWS for specific services and cannot be used to group IAM users.