MEDIUM
Source
Trivy
ID
1.6
Version
1.4

1.6 - enforce-root-hardware-mfa

The “root” account has unrestricted access to all resources in the AWS account. It is highly recommended that this account have hardware MFA enabled.

Control Checks

  • AVD-AWS-0165 - The “root” account has unrestricted access to all resources in the AWS account. It is highly recommended that this account have hardware MFA enabled.