When I am playing around in the cloud I am super paranoid about charges, so I end up locking the ACLs to only permit traffic to my home IP. It’s too bad that they don’t have a better built in way of making sandbox labs. When I was doing cloud training with A Cloud Guru, it would generate a whole global AWS instance that would only last for 30 minutes.
In general that would be a good question, but you've asked it in a case where "use AWS" is the _only_ way to accomplish the goal... which is learning AWS.
You commented on a post that included When I was doing cloud training with A Cloud Guru which is cloud certification platform. Can’t run “locally” getting prepped for an AWS certification and AWS is absolute shit for beginners in terms of cost protections