At what OSI layer do AWS Security Groups operate?

Question

I\'ve read couple of articles about AWS Security Groups:

• Amazon EC2 security groups for Linux instances
• Security Groups for your VPC

but