Re: This is the kind of thing that keeps me up at night
I also want to set limits on what and how much an AWS key can be used for.
1) Use a specific credit card
2) Amazon tells you often to use three-factor auth for the root account
3) Use separate IAM users with specific permissions for specific tasks (this takes some getting into and also queries on stackoverflow, but the interface is really nicely done)