With the recent announcement from AWS we can delegate AWS Organizations capabilities such as actions related to policy management can be delegated to a member account.
This will be very helpful and follows best practices of NOT putting any automations or compute in the Organization account, rather move our automation for managing Service Control Policies using a GitOps model from the delegated account.
github.com/defensive-works/aw...