[thedougd]

I recommend AWS Control Tower for getting this all setup. It's also compatible with Terraform in more than one way.

[bnchandrapal]

Ahhh. AWS Control tower has not cost but it requires AWS Config to be enabled. Config is yet another AWS service that can get costly over time (if continuous monitoring of changes is enabled)