IAM group IAM groups can only contain users not other groups. IAM users can belong to multiple groups though.