Skip to main content
PProfileMatch
← Path

AWS Fundamentals · AWS Fundamentals: Accounts, IAM Users, Roles and Least Privilege

0 XP
  1. 1 current stop: learning
  2. 2 upcoming
  3. 3 upcoming
  4. 4 upcoming
  5. 5 upcoming

Finish after stop 5

Stop 1 of 5 · Key cabinet at the bike depot

Trick to keep in mind+3 XP

Root is the master key: lock it in the safe, carry a day key instead.

The account's root user can do anything and ordinary policies cannot hold it back, so if it is compromised, everything is. Daily work should run under a narrower identity, and root should have multi-factor login and no access keys of its own. Convenience is the reason people misuse it, and it is exactly the reason not to.

Read it once, then a question tests whether the trick stuck.