Never share AWS root account credentials Delete any and all of root’s programmatic access keys Enable multi-factor authentication (MFA) on the root account Update the AWS password policy to rotate ...