Reset password notification

Question

I have entered an additional security contact for the AWS account.

If I select the "Forgot your password?" option for the root user and then enter my email address, will this security contact be notified (as well as the root user email)

This is why I want to know: if my email is hacked, it will be possible for someone to gain access to our AWS account which is potentially much more damaging to us than an email being hacked. The additional security email uses a different domain and provider and so unlikely to hacked as well at the same time.

Accepted Answer

Hello.

I tried resetting the root user's password by setting it up with my AWS account, but the email is only sent to the root user's email address.  
Emails were not sent to the email address set using the steps in the document below.  
https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-update-contact-alternate.html

We recommend configuring MFA for AWS root users.

Answer

From a technical standpoint I recommend setting up an EventBrige rule that captures Login Events for root user and then sending the json through a transformer with SNS to a relevant contact.

There's a post about something similar here: https://repost.aws/knowledge-center/root-user-account-eventbridge-rule

Answer

Enabling MFA for the root user will help to address this security concern -> https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa.html

Reset password notification

Contenido relevante