19-11 Enforcing Account Governance via AWS Control Tower (JPG)