A large financial services company with multiple business units plans to migrate workloads to AWS. The company wants to implement a multi-account strategy to separate workloads, ensure strong security boundaries, and delegate limited administrative control to individual business units. Key requirements include: · Centralized governance and visibility across all AWS accounts · Enforced compliance through guardrails and service control policies (SCPs) · Integration with the corporate Microsoft Active Directory for authentication · Role-based access to AWS accounts and resources for employees · Minimal custom development and operational overhead Which solution will BEST meet these requirements?