Haven't tried it, but should be able to use service control policies to do this broadly. https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage

Haven't tried it, but should be able to use service control policies to do this broadly. https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_examples_general.html https://docs.aws.amazon.com/organizations/latest/userguide/o... Can definitely do it at the permission policy level as shown in the links others provided.