A company needs to group users so it can assign permissions to the group rather than to each user individually. Which AWS service or feature lets the company create and manage user groups with permissions?

AWS Identity and Access Management (IAM) is the correct service because it allows you to securely manage access to AWS services and resources. Within IAM, you can create IAM users and then organize them into IAM groups. Permissions are attached to these groups, and all users within a group inherit those permissions, simplifying access management significantly. Security groups are virtual firewalls for EC2 instances, controlling inbound and outbound traffic, not user permissions. Resource groups help organize AWS resources for management and automation, not user access. AWS Security Hub is a security posture management service that aggregates and prioritizes security alerts, not for managing user groups and permissions.