[simsla]

You could set a cloudwatch cost alert that scuttles your IAM and effectively pulls the plug on your stack. Or something like that.