Which AWS service or feature gives a company the ability to control incoming traffic and outgoing traffic for Amazon EC2 instances?

Explanations:

Security groups act as virtual firewalls for EC2 instances, controlling both inbound and outbound traffic.

Amazon Route 53 is a DNS web service that routes end users to applications but does not control EC2 traffic.

AWS Direct Connect is a dedicated network connection for secure, high-bandwidth data transfer but does not manage EC2 traffic.

Amazon VPC provides a private network for EC2 instances, but traffic control is handled by security groups within the VPC.