Which statements about AWS Identity and Access Management $($IAM$)$ policies are accurate? $($Select TWO.$)$

Resource$-$based policies allow access by default.

Resource$-$based policies are attached to a user, group, or role.

Identity$-$based policies are attached to a user, group, or role.

Access control lists $($ACLs$)$ are a form of resource$-$based policies.

Identity$-$based policies can only be attached to a single entity.