A company needs to manage single sign-on and centralized access for users across multiple AWS accounts in an AWS Organization. Which AWS service should they use?

AWS IAM Identity Center (formerly AWS Single Sign-On) is the correct service because it centralizes user and access management across multiple AWS accounts and applications within an AWS Organization. It simplifies the process of granting users single sign-on access to all their assigned accounts and cloud applications. Amazon VPC (Virtual Private Cloud) is incorrect because it is used for provisioning a logically isolated section of the AWS Cloud to launch resources, not for identity management. Amazon GuardDuty is incorrect as it is a threat detection service that monitors for malicious activity and unauthorized behavior. Amazon Cognito is incorrect because it primarily focuses on user authentication and authorization for web and mobile applications, not centralized access across multiple AWS accounts in an Organization.