Multiplr root users for one MFA

Hello.

Hardware OTP devices cannot be shared.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_physical.html

A hardware TOTP token generates a six-digit numeric code based upon a time-based one-time password (TOTP) algorithm. The user must type a valid code from the device when prompted during the sign-in process. Each MFA device assigned to a user must be unique; a user cannot type a code from another user's device to be authenticated. MFA devices cannot be shared across accounts or users.

You can share app-based OTP or hardware-backed security keys.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_fido.html
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_virtual.html

Agree with Riku.. You can share the Virtual MFA by using the same QR Code and add to multiple phones. You can save the QR code in a vault and add it to a device anytime and it will still work.

However, its best practice NOT to use root.. That should be under lock and key and only used in an emergency or when only root can perform specific tasks

https://docs.aws.amazon.com/managedservices/latest/userguide/how-when-to-use-root.html