AWS recommends keeping root access to a minimum, using it only for essential operations, following the concept of least-privilege ... Organizations and use AWS IAM policies and SCPs to enforce ...