A company uses AWS Organizations to manage all of its AWS accounts. Which of the following allows the company to restrict what services and actions are allowed in each individual account?
-  IAM Principals.
-  AWS Service Control Policies (SCPs).
-  IAM policies.
-  AWS Fargate.