How do I log in multiple root users using MFA in AWS?

Asked 2 years ago, Updated 2 years ago, 384 views

Google authentication of smartphones is configured as the root user's MFA.
How can I allow anyone other than myself to log in as a root user using MFA?Other administrators are working far away.

aws aws-iam

2022-09-30 22:01

3 Answers

For AWS account root users,

We strongly recommend that you do not use root users for routine tasks, even if they are administrator tasks.Instead, follow the best practice of using the root user only to create the first IAM user.Then store the root user credentials in a secure location and use them to perform only a few account and service management tasks.

is described as .By default, you should not use the root user.

If more than one person is using it, you should have a hardware MFA device instead of a virtual MFA device that is tied to an individual.


2022-09-30 22:01

https://forums.aws.amazon.com/thread.jspa?threadID=137055&start=100&tstart=0
As far as this is concerned, it seems that the only way to do this is to save the QR code displayed when registering a virtual MFA terminal (Google authentication of a smartphone, etc.) in AWS as an image and read it on multiple terminals.
AWS does not seem to support the issue from the time it was proposed in 2013 until the end of 2021.


2022-09-30 22:01

Authentication is "confirmation of identity", so it is not normally assumed that a third party will log in using MFA.
It's all about Sayuri.
Stop using the root user in the first place and issue the IAM user properly.


2022-09-30 22:01

If you have any answers or tips


© 2024 OneMinuteCode. All rights reserved.