One of the chief benefits of cloud computing is the ability to experiment: to spin up infrastructure for hours or days and then shut it down again. Giving your developers the ability to manage their own environments gives them this freedom to experiment. But with great power comes great responsibility, and an unrestricted AWS account is one mistake away from becoming a crypto-currency mine.
This talk explores how we use “transient” accounts, manage costs, allow them to be re-assigned, and prevent abuse.
Accounts as a Service