A company wants users to sign in once and then authenticate and gain access to resources across multiple AWS accounts using the same credentials. Which AWS service enables this?

AWS IAM Identity Center (AWS Single Sign-On) is the correct choice because it allows users to sign in once with a single set of credentials and access multiple AWS accounts and applications. This centralizes identity management and simplifies access for users. AWS Organizations helps manage multiple AWS accounts but doesn't provide single sign-on capabilities for users. An IAM user is a single identity within one AWS account and doesn't facilitate cross-account single sign-on. AWS Control Tower helps set up and govern a multi-account AWS environment but relies on AWS IAM Identity Center for its single sign-on functionality.