Which AWS service should the company use to meet these requirements?
AWS Identity and Access Management (IAM)
AWS Organizations
AWS Resource Access Manager (AWS RAM)
AWS Config
Explanations:
AWS Identity and Access Management (IAM) is used for managing user permissions and access to AWS resources within a single account, but it does not provide centralized management for security policies and billing across multiple accounts.
AWS Organizations allows for the central management of multiple AWS accounts, including centralized billing and the application of service control policies (SCPs) to enforce security policies across all accounts in the organization.
AWS Resource Access Manager (AWS RAM) is designed to share AWS resources across accounts, but it does not offer centralized billing or comprehensive security policy management features for multiple accounts.
AWS Config is a service that enables assessment, auditing, and evaluation of the configurations of AWS resources, but it does not manage billing or centralized security policies across multiple accounts.