Create IAM users and IAM groups in each account. Create IAM policies to limit access to non-European Regions. Attach the IAM policies to the IAM groups.

Enable AWS Organizations, attach the AWS accounts, and create OUs tor European Regions and non- European Regions. Create SCPs to limit access to non-European Regions and attach the policies to the OUs.

Set up AWS Single Sign-On and attach AWS accounts. Create permission sets with policies to restrict access to non-European Regions. Create IAM users and IAM groups in each account.

Enable AWS Organizations, attach the AWS accounts, and create OUs for European Regions and non- European Regions. Create permission sets with policies to restrict access lo non-European Regions. Create IAM users and IAM groups in the primary account.