Tobias Schmidt @tpschmidt.com · Jun 9 TIL: AWS gives you exactly one native primitive that comes close to a hard spend cap. Not perfect, but it's something. Here's the setup: • Monthly budget on the sandbox (!) account, threshold at 80% for example
0 likes 1 replies
?
Replies
• Budget Action with action type AttachPolicy, target = prepared SCP (Deny * or a specific one) • ApprovalModel = Automatic • IAM role that Budgets can assume When the threshold is crossed, AWS Budgets calls Organizations and attaches the SCP. No SNS / Lambda / EventBridge fiddling necessary.