QuestionQ50

Content Domain 2: Security and Compliance

A company is using AWS Identity and Access Management (IAM).

Who can manage the access keys of the AWS account root user?

  • A IAM users in the same account that have been granted permission
  • B IAM roles in any account that have been granted permission
  • C IAM users and roles that have been granted permission
  • D The AWS account owner
Explanation

Access keys for the AWS account root user can only be created, viewed, and managed by the account owner who has the root credentials; AWS best practice is to avoid creating root access keys at all. IAM users and roles, no matter what permissions they are granted, have no ability to manage the root user's own access keys.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!