BudgetsSpendLimitDenyNewWorkloads: An SCP applied if you exceed your budget in the new AWS Sign Up experience as of 2026-09-17

Starred Gists，GitHub Gist，即时分享代码、笔记与代码片段。关注

	{
	"Version": "2012-10-17",
	"Statement": [
	{
	"Sid": "DenyCompute",
	"Effect": "Deny",
	"Action": [
	"ec2:CreateNatGateway",
	"ec2:CreateVolume",
	"ec2:CreateVpnConnection",
	"ec2:RunInstances",
	"ec2:StartInstances",
	"elasticloadbalancing:CreateLoadBalancer",
	"autoscaling:CreateAutoScalingGroup",
	"ecs:CreateService",
	"eks:CreateCluster",
	"eks:CreateNodegroup",
	"eks:CreateFargateProfile",
	"elasticbeanstalk:CreateEnvironment",
	"apprunner:CreateService",
	"apprunner:ResumeService",
	"batch:CreateComputeEnvironment",
	"elasticmapreduce:RunJobFlow",
	"appstream:CreateFleet"
	],
	"Resource": "*"
	},
	{
	"Sid": "DenyLambda",
	"Effect": "Deny",
	"Action": "lambda:CreateFunction",
	"Resource": "*"
	},
	{
	"Sid": "DenyDatabase",
	"Effect": "Deny",
	"Action": [
	"rds:CreateDBCluster",
	"rds:CreateDBInstance",
	"rds:RestoreDBClusterFromS3",
	"rds:RestoreDBClusterFromSnapshot",
	"rds:RestoreDBClusterToPointInTime",
	"rds:RestoreDBInstanceFromDBSnapshot",
	"rds:RestoreDBInstanceFromS3",
	"rds:RestoreDBInstanceToPointInTime",
	"rds:StartDBCluster",
	"rds:StartDBInstance",
	"dynamodb:CreateTable",
	"dynamodb:CreateGlobalTable",
	"elasticache:CreateCacheCluster",
	"elasticache:CreateReplicationGroup",
	"timestream:CreateDatabase",
	"timestream:CreateTable",
	"memorydb:CreateCluster",
	"es:CreateDomain",
	"aoss:CreateCollection",
	"redshift:CreateCluster",
	"redshift:ResumeCluster",
	"redshift-serverless:CreateWorkgroup",
	"dsql:CreateCluster"
	],
	"Resource": "*"
	},
	{
	"Sid": "DenyStorage",
	"Effect": "Deny",
	"Action": [
	"elasticfilesystem:CreateFileSystem",
	"datasync:CreateTask",
	"storagegateway:ActivateGateway",
	"glacier:CreateVault"
	],
	"Resource": "*"
	},
	{
	"Sid": "DenySageMaker",
	"Effect": "Deny",
	"Action": [
	"sagemaker:CreateApp",
	"sagemaker:CreateEndpoint",
	"sagemaker:CreateNotebookInstance",
	"sagemaker:CreateProcessingJob",
	"sagemaker:CreateTrainingJob",
	"sagemaker:CreateTransformJob",
	"sagemaker:StartNotebookInstance"
	],
	"Resource": "*"
	},
	{
	"Sid": "DenyBedrock",
	"Effect": "Deny",
	"Action": [
	"bedrock:CreateCustomModelDeployment",
	"bedrock:CreateDataAutomationProject",
	"bedrock:CreateEvaluationJob",
	"bedrock:CreateMarketplaceModelEndpoint",
	"bedrock:CreateModelCustomizationJob",
	"bedrock:CreateModelImportJob",
	"bedrock:CreateModelInvocationJob",
	"bedrock:CreateProvisionedModelThroughput",
	"bedrock-mantle:CreateCustomizedModel",
	"bedrock-mantle:CreateFineTuningJob",
	"bedrock-mantle:CreateReservation"
	],
	"Resource": "*"
	},
	{
	"Sid": "DenyAIML",
	"Effect": "Deny",
	"Action": [
	"kendra:CreateIndex",
	"personalize:CreateSolution",
	"personalize:CreateCampaign",
	"forecast:CreatePredictor",
	"forecast:CreateForecast",
	"rekognition:CreateProject",
	"lex:CreateBot"
	],
	"Resource": "*"
	},
	{
	"Sid": "DenyNetworking",
	"Effect": "Deny",
	"Action": [
	"cloudfront:CreateDistribution",
	"route53:CreateHostedZone",
	"appmesh:CreateMesh"
	],
	"Resource": "*"
	},
	{
	"Sid": "DenyApiGatewayCreate",
	"Effect": "Deny",
	"Action": "apigateway:POST",
	"Resource": [
	"arn:aws:apigateway:*::/restapis",
	"arn:aws:apigateway:*::/apis"
	]
	},
	{
	"Sid": "DenyMessaging",
	"Effect": "Deny",
	"Action": [
	"mq:CreateBroker",
	"kafka:CreateCluster",
	"kafka:CreateVpcConnection",
	"kinesis:CreateStream",
	"firehose:CreateDeliveryStream",
	"kinesisanalytics:CreateApplication",
	"kinesisvideo:CreateStream",
	"sns:CreateTopic",
	"sqs:CreateQueue",
	"events:CreateEventBus",
	"pipes:CreatePipe",
	"scheduler:CreateSchedule"
	],
	"Resource": "*"
	},
	{
	"Sid": "DenyAnalytics",
	"Effect": "Deny",
	"Action": [
	"states:CreateStateMachine",
	"glue:CreateJob",
	"glue:CreateCrawler",
	"athena:CreateWorkGroup",
	"appsync:CreateGraphqlApi",
	"appflow:CreateFlow",
	"datazone:CreateDomain",
	"datazone:CreateProject",
	"entityresolution:CreateMatchingWorkflow",
	"datapipeline:CreatePipeline",
	"dataexchange:CreateDataSet"
	],
	"Resource": "*"
	},
	{
	"Sid": "DenyDevTools",
	"Effect": "Deny",
	"Action": [
	"amplify:CreateApp",
	"amplify:CreateBranch",
	"cloud9:CreateEnvironmentEC2",
	"codebuild:CreateProject",
	"codepipeline:CreatePipeline",
	"codedeploy:CreateApplication",
	"cloudformation:CreateStack",
	"cloudformation:CreateStackSet",
	"codeartifact:CreateRepository",
	"codeartifact:CreateDomain"
	],
	"Resource": "*"
	},
	{
	"Sid": "DenySecurity",
	"Effect": "Deny",
	"Action": [
	"kms:CreateKey",
	"wafv2:CreateWebACL",
	"cloudhsm:CreateCluster",
	"network-firewall:CreateFirewall",
	"secretsmanager:CreateSecret",
	"acm-pca:CreateCertificateAuthority",
	"cognito-idp:CreateUserPool",
	"cognito-identity:CreateIdentityPool",
	"ds:CreateDirectory",
	"ds:CreateMicrosoftAD",
	"fms:PutPolicy",
	"payment-cryptography:CreateKey"
	],
	"Resource": "*"
	},
	{
	"Sid": "DenyMedia",
	"Effect": "Deny",
	"Action": [
	"medialive:CreateChannel",
	"mediapackage:CreateChannel",
	"mediaconnect:CreateFlow",
	"mediatailor:CreateChannel"
	],
	"Resource": "*"
	},
	{
	"Sid": "DenyIoT",
	"Effect": "Deny",
	"Action": [
	"iot:CreateThing",
	"iot:CreateTopicRule",
	"iotevents:CreateDetectorModel",
	"iottwinmaker:CreateWorkspace",
	"iotsitewise:CreateAssetModel",
	"iotsitewise:CreatePortal",
	"iotfleetwise:CreateCampaign"
	],
	"Resource": "*"
	},
	{
	"Sid": "DenyMisc",
	"Effect": "Deny",
	"Action": [
	"ses:CreateConfigurationSet",
	"ecr:CreateRepository",
	"aps:CreateWorkspace",
	"healthlake:CreateFHIRDatastore",
	"transfer:CreateServer",
	"managedblockchain:CreateNetwork",
	"managedblockchain:CreateMember",
	"route53-recovery-control-config:CreateCluster",
	"fis:CreateExperimentTemplate",
	"appfabric:CreateAppBundle",
	"appfabric:CreateIngestion",
	"b2bi:CreateProfile",
	"b2bi:CreateTransformer",
	"geo:CreateMap",
	"geo:CreatePlaceIndex",
	"geo:CreateTracker",
	"geo:CreateGeofenceCollection",
	"geo:CreateRouteCalculator"
	],
	"Resource": "*"
	}
	]
	}

添加评论

点踩

分享查看原文

参与讨论