A company wants to centrally define and enforce Amazon VPC security group policies across multiple AWS accounts in an organization under AWS Organizations. Which AWS service enables this centralized management?

AWS Firewall Manager is the correct choice because it allows you to centrally configure and manage firewall rules across your accounts and applications in AWS Organizations. This includes centrally defining and enforcing Amazon VPC security group policies, ensuring consistent security posture. Amazon GuardDuty is a threat detection service, not for policy enforcement. Amazon Detective helps investigate security findings, not manage policies. AWS WAF (Web Application Firewall) protects web applications from common exploits, but doesn't manage VPC security groups across accounts.