Have Lots of AWS Accounts (src-bin.com)

But then if yoy pay for support it only works in one account

If you use aws control tower to set up your stuff, this will happen sort of automatically.

Its been recommended practice for ages...

Use SCP (service control policy) to disable any services and regions you dont use. Tada. Much harder to get unexpected bill, much easier to enforce audit etc.

Root account for billing and AWS Identity Center. Dev account for all the crap and lax permissions so people can try stuff. Production account with only production and extremely strict permissions where changes can only be made with terraform or a god mode account.

Thank god I was saved from having to read the first two words of that headline. We should have faulty paternalistic algorithms governing even more of our lives.