Policing those internal users
I think Ivan was speaking in a context of users owning their own resources in a private cloud, enterprise setting. It's not cloud if it's not self service, is a pretty good axiom. If they need a firewall or load balancer, they should be able to provision themselves with the one they think they need. They're paying for it. If they overdo it, there should be charge back, or at least, show back.