Ravindra BagaleCourses & study guides मराठी Track your progress

Ravi Sir's Cards › AWS

Root user: rare, MFA, no keys

What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.

Root user: rare, MFA, no keys Your flat’s main door key is not lent to the delivery person every day. Root is that main door for the AWS account. The root user is the account email+password. It bypasses almost every IAM deny. Enable MFA, never create root access keys, use root only for a short break-glass list. First hour on a new account: root MFA, confirm no root keys, set billing contacts, enab
Root user: rare, MFA, no keys · Download PNG
Read card text

What this card says

Why do we need it?

Your flat’s main door key is not lent to the delivery person every day. Root is that main door for the AWS account.

What is it?

The root user is the account email+password. It bypasses almost every IAM deny. Enable MFA, never create root access keys, use root only for a short break-glass list.

Root MFA

How to do it

First hour on a new account: root MFA, confirm no root keys, set billing contacts, enable CloudTrail, create an admin path that is not daily root.

Example

Root sign-in shows MFA challenge; IAM credential report shows no root access keys.

See all AWS revision cards