Centrally manage root access in AWS Identity and Access Management (IAM)

This article discusses a new capability in AWS Identity and Access Management (IAM) that allows customers to centrally manage their root credentials and perform tightly scoped privileged tasks across member accounts managed using AWS Organizations.

Specifically, the article covers:

• Administrators can remove unnecessary root credentials for member accounts in AWS Organizations
• If needed, administrators can perform tightly scoped privileged actions using temporary credentials
• Removing unnecessary root credentials reduces the need for multi-factor authentication (MFA) and helps meet compliance requirements
• This capability is available in all AWS Regions, including GovCloud and China Regions
• Resources are provided for the AWS News Blog, documentation, and IAM console to get started