A cloud security architect is reviewing the management plane for a large IaaS deployment. During an incident review, the team discovers that a compromised service account's API key was used to programmatically spin up hundreds of compute instances in minutes, driving up costs and creating orphaned resources before anyone noticed. The management plane's authentication was intact, but the abuse still succeeded. Which control would MOST directly limit the impact of this type of orchestration abuse against the management plane?