IAM groups are used to better mimic the security terms in your organization groups. You could think of them as Active Directory groups. For example, in your organization, you would have administrators, developers, and testers.

To create a group, you can use the AWS Management Console, SDK, or CLI under the IAM add group and then attach a policy. Once you have created a group, you can attach it to a user or you can create a new one.