In AWS, the net effective permissions are calculated based on various policy types and identities. The correct choices are:
* A. AWS service control policies (SCPs): SCPs are used in AWS Organizations to manage permissions for all accounts within the organization, affecting the net effective permissions.
* B. AWS IAM group: IAM groups define a set of permissions for a collection of users, influencing their effective permissions.
* C. AWS IAM role: IAM roles provide temporary security credentials to assume a set of permissions, impacting the net effective permissions. Option D (AWS IAM User) and E (AWS IAM tag policy) also play roles in defining permissions, but A, B, and C are the primary types used in calculating net effective permissions, making them the correct choices.