Question

A company has just created a new AWS account for a critical production workload. The security team wants to follow AWS best practices to protect the account. Which action should they take to secure the AWS root user?

Accepted Answer

Enable multi-factor authentication (MFA) on the root user and use it only for tasks that require root access

Answer

Delete the root user after creating the first IAM administrator account

Answer

Attach an IAM policy to the root user that grants only least-privilege permissions

Answer

Share the root user credentials with all administrators so they can respond to incidents quickly