Doing it properly from the start.
ACCOUNT
Registered to the business, on a business email address Billing to the business Two administrators configured Recovery details independent of anything held in the account
SECURITY
A second authentication step, required Individual accounts for each person Minimum permissions per role Owner or root account reserved for rare use
COST
Billing alerts configured, at two thresholds Spending limits, where available Tagging or labelling scheme agreed
DATA
What will be held here, recorded Backup or export arrangement established Public access checked and closed
LOGGING
Activity logging enabled before anything is created
DOCUMENTATION
Added to your service record: what it is, who owns it, what it holds
BEFORE PROVISIONING ANYTHING
All of the above.
WHAT TO DIARISE
The first monthly bill review.