Which AWS service or tool is associated with an Amazon EC2 instance and acts as a virtual firewall to control inbound and outbound traffic?

Explanations:

AWS WAF (Web Application Firewall) is used to protect web applications from common web exploits but is not a firewall for EC2 instances.

AWS Shield provides DDoS protection but does not function as a virtual firewall for controlling traffic to and from EC2 instances.

Network access control lists (ACLs) control traffic at the subnet level but are not specific to individual EC2 instances.

Security groups are virtual firewalls specifically designed for Amazon EC2 instances, allowing users to control inbound and outbound traffic.