title: aws iam - prevent iam group or account from provisioning any services
body: <p>I am trying to use AWS Budget to avoid different departments over utilizing AWS resources, and I am wondering if I can prevent them from provisioning any new resource once their AWS Budget limit has reached. Is it possible through IAM policy, or SCP to prevent an account, or an IAM group from provisioning any new resources in AWS?</p>