A company wants to automate the creation of new AWS accounts and apply baseline security configurations. Which combination of services should be used to achieve this?