Create IAM Users And Roles Instead Of Using Root AWS Account

After setting up MFA on your root AWS account, you’ll want to create IAM users for your team and use those credentials instead of using the root account.

Similarly, you’ll want to use IAM roles for granting permissions to AWS services.

Here’s why:

If you’ve just gotten your first round of funding and AWS credits, it’s overkill to set up SSO account syncing with an identity provider when you’re a small team. You can get far with using separate IAM user accounts for now.

Of course, you’ll want to use your IAM user accounts and avoid using the root account as much as possible for security reasons.