A company is running its production and nonproduction environment workloads in multiple AWS accounts. The accounts are in an organization in AWS Organizations. The company needs to design a solution that will prevent the modification of cost usage tags. Which solution will meet these requirements?

• ACreate a custom AWS Config rule to prevent tag modification except by authorized principals.
• BCreate a custom trail in AWS CloudTrail to prevent tag modification.
• CCreate a service control policy (SCP) to prevent tag modification except by authorized principals.
• DCreate custom Amazon CloudWatch logs to prevent tag modification.