Block public access for functions [AWS Organizations]

**Note**
> * Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
> * Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do * not help prioritize the request
> If you are interested in providing additional feedback, please leave a comment

**Description**
We are exploring supporting Organization level policies to specify whether to block the attachment of new policies that would allow public access and/or restrict access to functions that are currently publicly accessible.

**Additional context**
1. What level of granularity do you need in an Organization level policy, for example, block access for all resources except this resource type?