VIEW RULE IN DATADOG VIEW SIGNALS

Description

To ensure the security of your AWS environment, you should centrally manage root user credentials and sessions for all accounts within your AWS Organization. The root user has unrestricted access to all services and resources. By centralizing the management of root users, you can prevent unauthorized recovery and large-scale access, strengthening the security posture of your organization. After this feature is enabled, the “Delete root user credentials” action should be performed on all member accounts to ensure that centralized access cannot be bypassed. Performing this action deletes all root user access keys, passwords, and signing certificates.

Remediation

For guidance on enabling centralized root credentials management and deleting root user credentials, refer to the Centralize root access for member accounts and Perform a privileged task on an AWS Organizations member account sections of the AWS Identity and Access Management User Guide.