Your organization has several departments, each needing its own set of IAM policies. However, you also want to manage these policies centrally to maintain consistency and control. Which approach should you take to best achieve this objective?