Your client intends to expand their cloud infrastructure to include separate environments for each department while maintaining centralized control over policy enforcement and compliance monitoring. Which service should be utilized to implement and automate this multi-account management with built-in best practices?
Identity and Access Management (IAM)
Control Tower
Organizations
Single Sign-On (SSO)