Oddly enough, Budgets seem to work, since I've gotten alerted to runaway services fast enough (I set it at 80% of my previously-free monthly AWS credits) to be able to log in and fix them, or shut them down.