From the course: AWS for Developers: Identity Access Management (IAM)
Root account - Amazon Web Services (AWS) Tutorial
From the course: AWS for Developers: Identity Access Management (IAM)
Root account
- [Instructor] When you create your AWS account, you've already started your IAM journey. Your sign-in identity has full access to all of the AWS services and features. It's what's called the root account. As far as your account goes, it's all powerful. With this root account, you can create other accounts. Of course, those accounts have whatever access you give them. More about that later. You could do that under the user section over here in IAM. There are some actions that do require the root account like configuring the root account, changing billing details and closing your account. But for most things, it's recommended you not use your root account. Instead, you should create other accounts with specific permissions that they require. And as we'll see later, you can create groups to manage the permissions in bulk. For obvious reasons, you need to strongly protect your root user account credentials. Also it's recommended to use multifactor authentication. You can set that up under my security credentials under your account tab on the top right. This will take you to IAM, you can continue to the security credentials and under the multifactor authentication, you can activate it with the activate MFA button. So consider yourself warned. With power comes responsibility and you really need to protect this account 'cause it can do a lot of damage in the wrong hands.