| Plugin Title | Root Hardware MFA |
| Cloud | AWS |
| Category | IAM |
| Description | Ensures the root account is using a hardware MFA device |
| More Info | The root account should use a hardware MFA device for added security, rather than a virtual device which could be more easily compromised. |
| AWS Link | https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_physical.html |
| Recommended Action | Enable a hardware MFA device for the root account and disable any virtual devices |