Create a single AWS account for all environments and use IAM policies to separate access.

Use AWS Organizations to create separate accounts for each environment, implement SCPs to restrict access to non-compliant services, and use AWS Control Tower to enforce GDPR compliance.

Create a single AWS account and use VPCs to isolate environments, without using AWS Organizations or SCPs.

Use AWS Organizations to create a single account per department, without implementing SCPs or considering GDPR compliance.