IAM Containment
The AWSSupport-ContainIAMPrincipal containment automation performs a reversible network containment
of an IAM user or role, leaving the user or role in IAM, but isolating it
from communicating with resources within your account.