IAM vs security groups, what's the difference?

IAM groups are a way of grouping IAM users and roles; permissions given to the group pass to its members. Security groups act like a firewall for your EC2 instances, determining which machines can connect and on which ports. In short, IAM governs identity and permissions, while security groups govern network access.