A company using AWS Organizations requires that no Amazon S3 buckets in its production accounts...

Set up MFA Delete on all the S3 buckets to prevent the buckets from being ddeleted.

Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts.

Create an IAM group that has an IAM policy to deny the s3:DeleteBucket action on all buckets in production accounts.

Use AWS Shield to deny the s3:DeleteBucket action on the AWS account instead of all S3 buckets.