What is the recommended best practice for using the AWS account root user?
A.Use root for daily administration to keep permissions simple
Daily root use is the #1 anti-pattern AWS warns against.
B.Secure root with MFA and use it only for tasks that require it
Correct. MFA-protected root, used sparingly, is the documented best practice.
C.Delete the root user after creating the account
The root user can't be deleted — only secured.
D.Share root credentials among the admin team
Shared credentials destroy accountability; use individual IAM identities.
Why this answer
AWS recommends locking down the root user: enable MFA, don't use it for everyday tasks, and perform work through IAM users/roles instead. Root can't be deleted but should be tightly secured.
Correct answer: B · Last reviewed 2026-10-26
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Security Basics practice session.
Practice Security Basics