Which AWS service lets you create new AWS accounts, group multiple accounts for organization and workflow purposes, and apply policies to account groups?

AWS Organizations allows you to centrally manage and consolidate multiple AWS accounts. You can create new accounts, group them into Organizational Units (OUs) to reflect your business structure, and apply policies (Service Control Policies or SCPs) to OUs or individual accounts. This helps manage permissions, compliance, and billing across your entire AWS environment. IAM (Identity and Access Management) manages users, groups, and roles within a single AWS account, not across multiple accounts. AWS Trusted Advisor provides recommendations for optimizing performance, security, and cost, but it doesn't manage accounts. AWS CloudFormation is an infrastructure as code service for provisioning and managing AWS resources, not for account management.