For the root user account, use a hardware MFA rather than software. 3) Lock Away User Access Keys Every time an account is created in AWS, an access key is generated by default. Delete these access ...