What gets SOC 2 certified?

I am struggling to understand this better. When a organization wants to get SOC2, what "things" get certified? I believe their product does ***not*** get SOC2, its the company's environment correct?

For example, you are certifying that your policies/processes/procedures (from HR to cloud development) are documented, etc and those are getting certified.

If the above is true, can anything else get SOC2 certified? Is it possible to only certify a part of your organization or does it have to be …

certified cloud cybersecurity development environment etc organization policies procedures processes product soc soc 2 soc2 the company things understand