top of page
AWS Foundational Security Best Practice
IAM.6
Hardware MFA should be enabled for the root user
Severity
Cloud Platforms
Resources
CRITICAL
AWS
AWS Identity and Access Management
This AWS control checks whether your AWS account is enabled to use a hardware multi-factor authentication (MFA) device to sign in with root user credentials.
bottom of page