Protect AWS root account with multiple YubiKeys

Question

I'd like to secure my **AWS root** account with **additional spake YubiKey**. 
At the moment I see only an option to set up just one YubiKey. 
In case YubiKey gets destroyed there is no option to add additional spare key. Most of the services online provides such functionality, but looks like AWS doesn't. 
This is quite important factor regarding security of the root account.

Answer

Just announced, https://aws.amazon.com/blogs/security/you-can-now-assign-multiple-mfa-devices-in-iam/, you can now associate multiple MFA devices to a root account.

Answer

There was a recent AWS Supports You episode on Twitch, https://www.youtube.com/watch?v=-nfDpE3Rr3Y&t=2247s, where several re:Post questions were covered. You can see an answer to this question at the 37:27 mark.

Protect AWS root account with multiple YubiKeys

Relevanter Inhalt