AWS account best practices

This is a living document that will keep growing to highlight AWS Best Practices!

Create an admin user and avoid using the root account

The root user has full privileges to the AWS account. For security purposes, it is recommended to limit the use of the root account. For daily processes, you can set up an administrator account instead.

Reference

Enable MFA on user sign-ins, especially for the root user

Multi-factor Authentication (MFA) allows you to secure your accounts and reduces the risk of being hacked.

Reference

Grant Least Privilege Access Required

For better security, set up your IAM policies to allow only the required tasks.

Reference

Set Up AWS budgets and account monitoring

To avoid unexpected bills, add budgets and notifications on each account.

Reference