• Root User == Accoutnt Owner (Created when the account is created)
• Has complete access to all AWS Services & Resources
• Lock away your AWS account root user access keys!!
• Do no use root access for everyday’s task, even administrative food.

- Action that can only be peformed by root users
    - Change Account Settings:
        1. Account Name
        2. Email Address
        3. Root User Password
        4. Root User Access Keys
    - close your AWS Account
    - Change/Cancel AWS Support Plan
    - Register as a se;;er in Reserved Instance Marketplace
    - View Certain Tax Invoice
    - Restore IAM User Permissions
    - Configure AWS S3 Bucket to enable MFA
    - Edit/Delete S3 Bucket Policy that includes invalid VPC ID or VPC EndpointID
    - SignUp for GovCloud.

• Find out which resources are shared externally:
  • S3 Bucket
  • KMS Keys
  • SQS Queue
  • IAM roles
  • Lambda Functions
  • Secret Manager’s Secrets
• Define Zone of Trust = AWS Account or AWS Organization
• Access Outside Zone of Trust => Findings