Protecting the root user with MFA and least privilege

For the root user, the rules are don't use it daily / enable MFA / store credentials securely / use least-privilege IAM for daily work. Sharing, daily operations, and disabling MFA are all dangerous anti-patterns.
・MFA (multi-factor authentication): in addition to a password, it also requires another factor such as a one-time code to strengthen identity verification.
・SSO (single sign-on): a single authentication lets you sign in to multiple accounts and apps (on AWS, provided by IAM Identity Center).