Summary

• The root user has complete, unrestricted access to all resources, including billing information, on the account. This is a superuser, and its permissions cannot be altered by any other user on the account.
• Never share your credentials with other users, especially root credentials, as they give unrestricted access within an AWS account.
• Usually, an individual user is authenticated by a username and password. Similarly, programmatic access through applications and CLIs are authenticated using an access key ID and secret key.
• An access key ID and secret key come in a pair. An access key ID is a 20-digit key and a secret key is a 40-digit key.
• AWS does not provide any mechanism to retrieve an access key ID or a secret key if these keys are lost.
• Password policies specify the complexity requirement of a password, and define a mandatory rotation period for a password associated...