> If you've set "spending limits", an adversary that has your credentials can change your limits to those same limits used by the F500 companies. The way I hav

> If you've set "spending limits", an adversary that has your credentials can change your limits to those same limits used by the F500 companies. The way I have seen this being operazionalized in AWS is by Finance having the exclusive access to a "parent" AWS account controlling billing (and nothing else), and then providing sub-acconts to Production, Development, Data Science and other technical stakeholders.