title: Is it better to use AWS IAM User Group, or IAM Role for users to assume?
body: <p>So after reading through this: <a href="https://stackoverflow.com/questions/36991831/aws-iam-role-vs-group">AWS IAM Role vs Group</a> I'm not entirely sure what would be better for a group of users.</p>
  <p>We're looking at implementing a group of users with least privileges, but doing it by giving them all a 'dev' role to assume, rather than a group.</p>
  <p>This seems reasonable but what's the best practice here? What advantages do AWS User Groups have over Roles or vice versa?</p>