aws deny key account items

deny-account-key-items.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "DenyAdminAccountAndBilling",
            "Effect": "Deny",
            "Action": [
                "organizations:*", 
                "aws-portal:*Billing",
                "awsbillingconsole:*Billing",
                "aws-portal:*Usage",
                "awsbillingconsole:*Usage",
                "aws-portal:*PaymentMethods",
                "awsbillingconsole:*PaymentMethods",
                "budgets:ViewBudget",
                "budgets:ModifyBudget",
                "cur:*"
            ],
            "Resource": "*"
        }
    ]
}