Block expensive and long-running AWS API calls by denying AWS IAM actions.

aws scps cost management