You should always use security groups to allow you to manage network traffic at an instance level, controlling what traffic is allowed to and from instances. They allow you to group resources together that have similar functionality. It's important to remember that security groups are stateful by design and you can apply multiple security groups to a single resource.