How to completely lock down an AWS account with a service control policy (SCP) | Hacker News Reader