A company runs a hybrid cloud and has multiple AWS accounts under AWS Organizations. The team needs a managed list of on-premises IPv4 hosts that are allowed to access AWS resources. The list must support version control and be shareable with all AWS accounts in the organization. Which solution meets these requirements?

Creating a customer-managed prefix list allows you to define a collection of IP address ranges. This list supports version control, as changes can be tracked. Sharing this prefix list via AWS Resource Access Manager (RAM) with the entire organization ensures all accounts can reference it in security groups or network ACLs, meeting the requirement for a managed, shareable list of allowed on-premises hosts. Using AWS Firewall Manager for sharing prefix lists is incorrect because Firewall Manager primarily manages security policies across accounts, not directly sharing prefix lists in this manner. Security groups cannot be shared directly across accounts using RAM; they are account-specific. While DynamoDB and Lambda could manage and distribute IP lists, this is an overly complex and unmanaged solution compared to the native prefix list feature, which is designed for this exact purpose.