A financial institution operates across multiple AWS accounts and needs to ensure that all accounts adhere to strict security policies and practices. Which AWS service would best help them manage these requirements?