News for hackers. Stuff that matters.

A comment on Ask HN: How do you manage AWS root MFA in a remote work environment?. Parent comment

Re:Ask HN: How do you manage AWS root MFA in a remote work e... by gfisher on Saturday September 24, 2022 @12:01AM (#32959642)
Yes, you are totally correct. We don't use our root account now, and we keep our our corporate Yubikeys in a safe with a 2-key access lock. The issue is that fewer and fewer people have access to the safe due to geography. I'm worried about our in-city bus factor.
[ Parent | on HN ]
Re:Ask HN: How do you manage AWS root MFA in a remote work e... by GauntletWizard on Saturday September 24, 2022 @05:04PM (#32966523)
Tread carefully with permissions; when making changes to admin roles make sure you've got a backup role you can use to undo.

Remember that if all else fails, AWS will send your company a physical letter that support will verify and unlock your account.

[ Parent | on HN ]