Best Practices for AWS Organizations Service Control Policies in a Multi-Account Environment | Amazon Web Services
https://aws.amazon.com/blogs/industries/best-practices-for-aws-organizations-service-control-policies-in-a-multi-account-environment/