EC2 is basically your server in the AWS context. VPC (Virtual Private Cloud) is where you can logically isolate your AWS resources. EC2 can be launched in VPC. If you open EC2 in any VPC, you will have all the options available. So, EC2+VPC will be a better combination for Security.
I recommend enrolling in this AWS Course by Intellipaat to become proficient in AWS.
You can watch this video on instances in AWS: