4 ms·
I was referring to the root accounts in your organization. The blast radius is more limited, but still a root account that has access to everything within that
by dmlittle 6y ago
I was referring to the root accounts in your organization. The blast radius is more limited, but still a root account that has access to everything within that AWS account.
- time0ut 6y agoYou can restrict what the root account can do in a member account using SCPs as an additional safeguard as well.