You are responsible for securing an AI system deployed on AWS that involves multiple machine learning models. You need to assign permissions that allow developers to access only specific models without granting excessive permissions. Which AWS service should you use to control and assign such permissions?