Your company is planning to implement a multi-account strategy in AWS to separate different environments such as development, testing, and production. How can you ensure secure and controlled access between these accounts while maintaining isolation?