By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Protect AWS root account with multiple YubiKeys

2

I'd like to secure my AWS root account with additional spake YubiKey. At the moment I see only an option to set up just one YubiKey. In case YubiKey gets destroyed there is no option to add additional spare key. Most of the services online provides such functionality, but looks like AWS doesn't. This is quite important factor regarding security of the root account.

Topics
AWS Well-Architected FrameworkManagement & Governance
Tags
SecurityAWS Account ManagementMulti-factor Authentication
Language
English
Finmid
asked 2 years ago298 views
2 Answers
0

There was a recent AWS Supports You episode on Twitch, https://www.youtube.com/watch?v=-nfDpE3Rr3Y&t=2247s, where several re:Post questions were covered. You can see an answer to this question at the 37:27 mark.

profile pictureAWS
StephenHeverin_AWS
answered a year ago
0

Just announced, https://aws.amazon.com/blogs/security/you-can-now-assign-multiple-mfa-devices-in-iam/, you can now associate multiple MFA devices to a root account.

profile pictureAWS
StephenHeverin_AWS
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content