IAM Root User Access Key Should Not Exist Rule

The rule states that in order to comply with PCI v3 requirements, the IAM root user access key should not exist.

The IAM root user has full access and control over the entire AWS account, making it a potential security risk. By disabling the access key for the IAM root user, the risk of unauthorized access or misuse of privileges can be mitigated.

To remediate this issue and comply with PCI v3 requirements, follow the steps below:

• Open a web browser and navigate to the AWS Management Console login page.

• Enter the email address associated with the root user account and click "Next".
• Enter the password for the root user account and click "Sign in".

Note: If you have enabled Multi-Factor Authentication (MFA) for the root user, follow the additional steps prompted by the MFA device.

• Once logged in, navigate to the IAM service page by typing "IAM" in the search bar and selecting "IAM - Identity and Access Management" from the results.

• From the IAM dashboard, click on "Users" in the left-hand menu.

• Look for the user named "root" in the list of IAM users. This is the root user account.

• Click on the checkbox next to the root user.
• Click on the "Security credentials" tab at the bottom of the page.
• Expand the "Access keys (access key ID and secret access key)" section.
• Click on the "Delete" button next to the root user's access key.

• Refresh the page and verify that no access keys are listed for the root user.

If you encounter any issues while disabling the root user access key, follow these troubleshooting steps:

• Ensure that your IAM user has the necessary permissions to disable access keys for the root user. The user should have the "iam:DeleteAccessKey" permission assigned.

• If you have enabled Multi-Factor Authentication (MFA) for the root user, make sure you have followed the correct MFA steps for authentication.

• If the issue persists or you have any difficulties, consider contacting AWS Support for further assistance. Provide any error messages or details about the problem to help expedite the troubleshooting process.

• It is recommended to create and use IAM users with limited permissions instead of relying on the root user account for day-to-day operations.
• Regularly review and audit IAM users' access keys to ensure compliance with security best practices.
• Enable MFA for all IAM users, including the root user, to add an extra layer of security to the AWS account.