IAM & Security

When you create an AWS account, you get a root user with complete access to everything — including billing and closing the account.

Best practices: • Turn on multi-factor authentication (MFA) for the root user immediately. • Don't use the root user for everyday work; create IAM identities instead. • Never create access keys for the root user.

MFA adds a second factor — a code from an app or a security key — so a stolen password alone isn't enough.