As an AWS administrator, you want to grant a group of developers access to specific AWS services and resources based on their roles and responsibilities. Which AWS IAM feature should you use to achieve this?