Root account does not require hardware multi-factor authentication (MFA)

Details

This rule checks for adherence to Center for Internet Security (CIS) Recommendation 1.14, Ensure hardware MFA is enabled for the “root” account. https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf#page=38

Tags: iam cis