¿Cómo cambio mi cuenta MFA a raíz?

How do I change my MFA to root account?

Reset a lost MFA device

1. Navigate to the AWS sign-in page, and enter your root account’s email address.
2. On the Root user sign in page, enter the password of your root account.
3. On the Amazon Web Services Sign In With Authentication Device page, choose Having problems with your authentication device?

All AWS users have security credentials. The credentials of the account owner allow full access to all resources in the account. You cannot use IAM policies to explicitly deny the root user access to resources. You can only use an AWS Organizations service control policy (SCP) to limit the permissions of the root user.

Creating access keys for the root user. You can use the AWS Management Console or AWS programming tools to create access keys for the root user. Sign in to the IAM console as the account owner by choosing Root user and entering your AWS account email address. On the next page, enter your password.

Deactivating MFA devices (console) To deactivate the MFA device for a user, choose the name of the user whose MFA you want to remove. Choose the Security credentials tab. Next to Assigned MFA device, choose Manage. In the Manage MFA device wizard, choose Remove, and then choose Remove.

Transfer your Authenticator keys via Android

1. Open Google Authenticator on your older phone.
2. Tap on the three dots on the top right of the screen and select “Transfer accounts”
3. Select “Export accounts.” You may be asked to verify your identity via a fingerprint, password, or another method.

Sign in to the Prod account as a user with administrator privileges. In the IAM console, create a new role and name it CrossAccountSignin . Choose the wizard option for creating cross-account access between accounts that you own. For details, see Creating a Role for Cross-Account Access.

There are no root accounts or main root accounts in AWS Organizations. There is one master AWS account and there are zero or more member AWS accounts. The term root refers to an AWS Organizations construct within the master account that is the parent container for all of the member accounts in your organization.

To add an additional layer of security in protecting your root account, it is strongly recommended to enable Multi-Factor Authentication (MFA) on the root account. MFA forces the user to provide a not only a password but also a security token to confirm the user’s identity.

For more information about enabling MFA, see the following: You can use the AWS Management Console or AWS programming tools to create access keys for the root user. Sign in to the IAM console as the account owner by choosing Root user and entering your AWS account email address.

To reset your MFA device, you must know and have access to the email address and phone number associated with your root account. Follow these steps to reset your lost MFA device: Navigate to the AWS sign-in page, and enter your root account’s email address.

You have now successfully enabled virtual MFA and associated it with your root account, and your root account is now protected by using MFA. You will use the virtual MFA app to generate an authentication code for subsequent sign-ins.

We do recommend that you use a virtual MFA device while waiting for hardware purchase approval or while you wait for your hardware to arrive. Most virtual MFA apps support creating multiple virtual devices, allowing you to use the same app for multiple AWS accounts or users. However, you can enable only one MFA device per user.