The security of your AWS resources can be maintained by following these best practices:
- Never share credentials (that is, the password or access key and secret key). Specifically, sharing root user credentials can pose a very serious security threat as they carry the highest level of access in the relevant AWS account.
- Never use the root account for day-to-day tasks. Create individual IAM users for designated roles and responsibilities.
- Until and unless it is essential, do not create an access key and a secret key. Also, keep rotating the password and keys periodically.
- It is not best practice to hardcode the access key and secret key in any program or application.
- Keep your access key and secret key secured so that they do not fall into the hands of any unauthorized person. A secret key is only generated once paired with a relevant access key. If a secret key is lost, then there is no mechanism in AWS to retrieve it. You need to discard the existing key and regenerate it....