After initial login, what does AWS recommend as the best practice for the AWS Account Root User?

After initial login, what does AWS recommend as the best practice for the AWS Account Root User?

• A. Enable Multi-Factor Authentication
• B. Delete root user access keys
• C. Create additional IAM users
• D. Change the account password

Answer: (B)

The best practice recommended by AWS for the AWS Account Root User is to enable Multi-Factor Authentication (MFA). Enabling MFA adds an essential layer of security by requiring not only the user’s password but also an additional authentication method, typically via a device or app, to access the account. This significantly reduces the risk of unauthorized access, as it requires possession of the second factor, which is something only the authorized user should have. While deleting root user access keys, creating additional IAM users, and changing the account password are also important security measures, they do not address the immediate and critical security enhancement available through MFA. By utilizing MFA, the overall security posture of the root user account is greatly improved, protecting sensitive account settings and financial information stored within the AWS environment.

The best practice recommended by AWS for the AWS Account Root User is to enable Multi-Factor Authentication (MFA). Enabling MFA adds an essential layer of security by requiring not only the user’s password but also an additional authentication method, typically via a device or app, to access the account. This significantly reduces the risk of unauthorized access, as it requires possession of the second factor, which is something only the authorized user should have.

While deleting root user access keys, creating additional IAM users, and changing the account password are also important security measures, they do not address the immediate and critical security enhancement available through MFA. By utilizing MFA, the overall security posture of the root user account is greatly improved, protecting sensitive account settings and financial information stored within the AWS environment.