A city clerk still signs in with the AWS account root user for everyday console work. What should the architect recommend for day-to-day access while protecting root?
Select an answer to reveal the explanation.
Short Explanation
Root is the master key to city hall—you do not carry it to grab coffee every morning. Day-to-day work should use Identity Center or IAM identities, with MFA on root and the root credentials locked away. Root stays for rare break-glass moments, not routine clicks.
Full Explanation
AWS security best practice is to protect the account root user with MFA, store root credentials securely, and never use root for routine administration. Daily console and API work should use IAM Identity Center permission sets or IAM users/roles with least privilege. Sharing the root password, issuing root access keys, or attempting to eliminate root entirely without a controlled break-glass path conflicts with that model.