A company is utilizing AWS Organizations to manage multiple accounts and must adhere to regulatory requirements that mandate restricting specific member accounts to certain AWS Regions for resource deployment. Additionally, all resources within these accounts must be tagged in accordance with a standardized group policy and managed centrally with minimal configuration overhead. What should a solutions architect implement to fulfill these requirements?