Guided Notes
IAM & Security
The root user, IAM users, groups, roles, and policies, MFA, AWS Organizations, and security services.
The root user and MFA
Slide 1 / 5When you create an AWS account, you get a root user with complete access to everything — including billing and closing the account.
Best practices: • Turn on multi-factor authentication (MFA) for the root user immediately. • Don't use the root user for everyday work; create IAM identities instead. • Never create access keys for the root user.
MFA adds a second factor — a code from an app or a security key — so a stolen password alone isn't enough.