Secure by Design: AWS enhances centralized security controls as MFA requirements expand

This article discusses AWS's efforts to enhance centralized security controls and expand multi-factor authentication (MFA) requirements for root users on AWS accounts.

Specifically, the article covers:

• The importance of MFA in preventing unauthorized access and AWS's goal of improving customers' default security posture
• AWS's requirement for MFA on root users in AWS Organizations management accounts starting in May 2024, and standalone accounts starting in June 2024
• The launch of FIDO2 passkey support as a new MFA method in June 2024, resulting in over 100% increase in phishing-resistant MFA registrations
• The introduction of a new capability to centrally manage root access for AWS Organizations accounts, reducing the need for managing numerous root account passwords
• The expansion of MFA requirements to root users of AWS Organizations member accounts, rolling out gradually starting in Spring 2025