Custom solution for rotating root account

Question

How to  design a custom solution to automatically rotate root account passwords for all AWS accounts? Below is a reference provided by AWS that is supposed to record the API calls - 
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-event-reference-aws-console-sign-in-events.html#cloudtrail-root-password-changed

However, it is not getting recorded in the cloudtrail logs.

Answer

I don't think it is possible to change the password for the root user automatically, as it is not supported by the AWS CLI or SDK.  
Changes can only be made from the management console.  
https://docs.aws.amazon.com/accounts/latest/reference/root-user-password.html  
> This task isn't supported in the AWS CLI or by an API operation from one of the AWS SDKs. You can perform this task only by using the AWS Management Console.

Custom solution for rotating root account

相关内容