When we evolved to SSO and subaccounts with various roles/access, there were resources running/used by different accounts. I would see the instance in the costs. But then, I'd try and find that instance, started by another dev, and get access to shut if off. And even though I'm the main account owner--which to me, means I should be able to nuke whatever, since I pay the bills, I always had trouble getting to it, and getting the permissions for what I wanted.
I used Vantage, which helped me see the problem, but then taking action on it was traumatic.
The barriers are:
- who owns it?
- what service is it in (if it is logs, for example)?
- where is the screen it is on?
- how do I get the permissions to kill it?