Your client intends to expand their cloud infrastructure to include separate environments for each department while maintaining centralized control over policy enforcement and compliance monitoring. Which service should be utilized to implement and automate this multi-account management with built-in best practices?
Single Sign-On (SSO)
Identity and Access Management (IAM)
Organizations
Control Tower