IAM roles in AWS are a way to grant permissions to entities like EC2 instances or Lambda functions without needing to manage long-term credentials. You’d use IAM roles over IAM users when you want to assign permissions dynamically to services or applications, especially in automated environments.