All certifications / Security Specialty / Lessons

AWS Certified Security – Specialty SCS-C03 · Domain 4: Identity and Access Management

Root user and credential hygiene: protecting the root user, centralized root access, removing long-term keys and credential reports

Last reviewed September 29, 2026 · Leer en español

Every AWS account has a root user with complete control, including tasks no IAM policy can grant, such as changing account settings, closing the account or restoring a locked S3 bucket policy. Protecting it, and cleaning up long-term credentials in general, is basic hygiene the exam expects.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 3 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Study Security Specialty for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.

Open the Security Specialty study plan