> Are we including deleting RDS data? S3? Glacier storage?

If you're billing per GB of storage, then you can put hard caps on storage capacity, and then hard-reject any operation that would take the total stored size over that capacity.