why should we use a newly created administrator user and not root account in aws?

0 votes
Sep 12 in AWS by anonymous
86 views

1 answer to this question.

+1 vote

The root account has full access to all the resources in the account. You cannot use polices to explicitly restrict access to any kind of resources with this account. 

With IAM, you can securely control access to AWS services and resources for users in your AWS account. For example, if you require administrator-level permissions, you can create an IAM user, grant that user full access, and then use those credentials to interact with AWS. If you need to modify or revoke your permissions, you can delete or modify the policies that are associated with that IAM user.

Reference: https://docs.aws.amazon.com/general/latest/gr/root-vs-iam.html

answered Sep 16 by Bob

Related Questions In AWS

0 votes
1 answer

Want to use an AWS Cognito User Pool without putting a password(for an easier approach)

Currently, AWS Cognito is not supporting passwordless ...READ MORE

answered May 4, 2018 in AWS by Cloud gunner
• 4,280 points
1,449 views
0 votes
1 answer

if instance is a part of some AutoScaling Group in AWS or not ?

You can run this command below on ...READ MORE

answered Jun 1, 2018 in AWS by Cloud gunner
• 4,280 points
58 views
0 votes
1 answer

How and Why AWS bill comes after i suspended the account

Amazon does not have a "suspend" account. ...READ MORE

answered Jul 20, 2018 in AWS by Priyaj
• 56,900 points
114 views
0 votes
1 answer

When should I use a t2.medium vs. a m3.medium instance type within AWS?

30000 hits per month is on average ...READ MORE

answered Aug 17, 2018 in AWS by Priyaj
• 56,900 points
515 views
0 votes
1 answer
0 votes
2 answers

How to skip headers when reading a CSV file in S3 and creating a table in AWS Athena?

Thanks for the answer. This should be clear ...READ MORE

answered Aug 14 in AWS by athenauserz
1,245 views
0 votes
1 answer

Pass account id of an AWS sub account using a variable as an argument in CloudWatch Alarm Actions with python (boto3)?

Python String and Integer concatenation >>> print("arn:aws:swf:us-east-2:{0}:action/actions/AWS_EC2.InstanceId.Stop/1.0".format(acccnum)) arn:aws:swf:us-east-2:12312312312312:action/actions/AWS_EC2.InstanceId.Stop/1.0 >>> print("arn:aws:swf:us-east-2:" ...READ MORE

answered Oct 5, 2018 in AWS by Priyaj
• 56,900 points
142 views
+1 vote
2 answers
0 votes
2 answers

Receiving SMS from users and stores in AWS

As far as I know, receiving international ...READ MORE

answered Aug 21, 2018 in AWS by Priyaj
• 56,900 points
82 views