How do I gain access as an AWS account root user to accounts created by Account Factory or Account Vending Machine in AWS Control Tower?
I want to gain access to my AWS account as an AWS account root user. The account was created by Account Factory or Account Vending Machine in AWS Control Tower.
Resolution
- Sign out from any AWS accounts you're signed into in your browser.
- Open the AWS login page.
Note: If you don't have the email address of the account that you want to access, find it in the AWS Control Tower console. Open the Control Tower console for the management account, choose Accounts, and then look for the email address. - For Root user email address, enter the email address of the account that you want to access, and then choose Next.
- To have password reset instructions sent to the account root user email address, choose Forgot your password?
- Open the password reset email message from the root user mailbox, and then follow the instructions to reset your password.
Note: It's a best practice to activate multi-factor authentication (MFA) for AWS accounts. - Open the AWS login page, and then sign in as root user with your new password.
Related information
Tasks that require root user credentials
Enable multi-factor authentication for your AWS account root user (console)
- 語言
- English
Accounts created by Account Factory do not have MFA enabled (root). Let's say that I want to enable Detect whether MFA for root user is enabled control for a specific OU within AWS Control Tower. Then all the accounts created by Account Factory will result to be non compliant. Is it a best practice to gain access to root accounts by resetting password and enable MFA? Or Should I ignore the warning? Isn't a best practice to have MFA enabled on Root accounts?
回答 2 年前
Thank you for your comment. We'll review and update the Knowledge Center article as needed.
相關內容
已提問 1 年前
已提問 3 年前
