In landingzone environment i have multiple OU. I have github action workflow and it is authenticated using OIDC. There is no issue with authentication between AWS and github. I also have terraform to deploy resources. I have one requirement to delete default vpc from each member accounts from the landing zone.