Secure root user access for member accounts in AWS Organizations

AWS introduces a new feature for centralized management of root user access across AWS Organizations, enabling security teams to control and manage root credentials in member accounts more effectively.

• Allows centralized monitoring, removal, and prevention of root credential recovery across member accounts
• Provides privileged root actions with short-term (15-minute) task-scoped root sessions
• Supports actions like unlocking S3 bucket and SQS queue policies without permanent root credentials
• Enables delegation of root access management to a dedicated security account
• Supports CLI and console management of root credentials

Key benefits include improved security posture, reduced management overhead, and simplified root credential management across an organization's AWS accounts.