Roles and access

Question

Hello!1)Our admin opened AWS account, but now the administrator left, how can I get the statistics of entrances and understand which role am I by my email:IAM or Root user? And if something was changed recently? Emails seem to be received with a few hours delay. 
2)Adding Organization details will add security, or it's not on the Free Trial time?

Answer

Also it sounds like there was a situation where the handling of a root credential wasn't locked down in the first place.

Please seek the following documentation on best practices for handling an account's root user.

https://docs.aws.amazon.com/accounts/latest/reference/best-practices-root-user.html

I would read that documentation first after regaining control of your account, as you'd want to make sure this sort of thing doesn't happen again.

Answer

IAM users and root users have different login methods.  
You can check which user is currently being used by logging into the management console, where the user name is displayed in the upper right corner of the screen.  
**root user**  
https://docs.aws.amazon.com/ja_jp/signin/latest/userguide/introduction-to-root-user-sign-in-tutorial.html

**IAM**  
https://docs.aws.amazon.com/ja_jp/signin/latest/userguide/introduction-to-iam-user-sign-in-tutorial.html

As for the email, I too find it a bit slow, but once it is received, I don't think it is a problem.

If you are using AWS Organizations to manage your AWS accounts, you can enhance security by using SCP to restrict actions on your accounts.  
This can be used even during the free period.  
It would also be a good idea to use AWS Control Tower to set up guardrails to prevent unexpected actions.  
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html  
https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-CTower.html

Roles and access

Relevant content