Question

A company has just created a new AWS account for a production workload. During a security review, an architect notes that the root user is currently used for daily administrative tasks and has only a password configured. Which combination of actions best aligns with AWS security best practices for protecting the account? (Choose the single best answer.)

Accepted Answer

Enable MFA on the root user, stop using the root user for daily tasks, and create individual IAM users or federated identities with least-privilege permissions.

Answer

Delete the root user entirely and manage the account exclusively through IAM users with administrator access.

Answer

Keep using the root user for administration but rotate its password every 30 days and restrict its access with a service control policy.

Answer

Attach an IAM policy directly to the root user that grants only the specific permissions needed for daily administrative work.