QuestionQ606

Content Domain 2: Security and Compliance

Which actions represent best practices for an AWS account root user?

Choose two
  • A Share root user credentials with team members.
  • B Create multiple root users for the account, separated by environment.
  • C Enable multi-factor authentication (MFA) on the root user.
  • D Create an IAM user with administrator privileges for daily administrative tasks, instead of using the root user.
  • E Use programmatic access instead of the root user and password.
Explanation

An AWS account has a single, highly privileged root user. AWS recommends enabling MFA to protect that identity and using a separate administrative IAM user for everyday administrative work, reserving root credentials only for tasks that specifically require them.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!