AWS Accounts

Basics

• AWS account is a container for AWS Identities & Resources
• An AWS account is created by providing an account name, a unique email address & a payment method (credit card)
• Same credit card can be used for multiple aws accounts but email address has to be unique
• When an account is created a special IAM identity called "Account Root User" is created
• An account root user has full access to all resources within the account & it can not be restricted
• Identity and Access Management (IAM) service is used to create & manage other identities.
• Users, Roles & Groups are examples of Identities that can be created
• When created all identities have no permisions to any of the AWS resources
• Any identities external to the account by default are denied any access to your account
• Enabling MFA for login is a good security practice