Open cardosec

Case B058EF · Cloud · L1 Foundations

Protecting the Root Account

Practise as: Explain it · InterviewLevel: L1 Foundations

Interview questionHow should you protect a cloud account's root or global administrator identity?

  1. 01 What is it?
  2. 02 How is it abused?
  3. 03 How do you stop it?
Practise this card As Interview
What a strong answer covers

Try it out loud first. Then check yourself:

  1. Root can do anything, including closing the account and changing billing, and some of its powers cannot be restricted.
  2. Use strong MFA (ideally a hardware key), never create access keys for it, and keep the sign-in details in a controlled safe.
  3. Do not use it day to day: admins use SSO and roles, and root is only for the few tasks that need it.
  4. Alert on every root sign-in, and with many accounts, centralize root management through the organization.

If the interviewer pushes back

  • Who in your organization should be able to sign in as root, and how would you prove the process works?

Go deeper

More Cloud cards

All Cloud cards →

cardosec draws a security topic and gives you a clock: explain it out loud with no notes, then see what you covered and what you missed. Free during early access.

Reviewed 2026-10-09