Automation that stops unused lab EC2 instances every night currently uses root user access keys. What is the recommended Cloud Practitioner guidance?
Select an answer to reveal the explanation.
Short Explanation
Root access keys are a skeleton key to the entire account — using them for nightly scripts is asking for trouble. Park the automation under an IAM role or a locked-down IAM identity so a leaked key cannot empty the whole house.
Full Explanation
AWS recommends protecting the root user: enable MFA, avoid creating root access keys, and never use root for routine automation. Daily jobs should use IAM roles or IAM users/roles with least-privilege policies. Root credentials, if compromised, allow unrestricted account control.