Stop serving requests until the finances are rectified, delete the data 30 days after it stops. Final migration out/egress requires a small balance for that purpose.

The engineers designing and building these systems are some of the best in the world, this is relatively trivial.