A finance company needs to implement a solution to share a common network across multiple AWS accounts which are a part of an AWS organization. The company's operations team uses a dedicated operations account with a VPC, and this must be used for network management. Individual accounts cannot have the ability to manage their own networks. However, individual accounts must be able to create AWS resources within subnets. Which combination of actions should be taken to meet these requirements? (Select TWO.)