Using the Amazon Web Services account root user - Amazon Account Management
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Using the Amazon Web Services account root user

Important

Anyone who has root user credentials for your Amazon Web Services account has unrestricted access to all the resources in your account, including billing information.

When you create an Amazon Web Services account, you begin with one sign-in identity that has complete access to all Amazon Web Services and resources in the account. This identity is called the Amazon Web Services account root user and is accessed by signing in with the email address and password that you used to create the account. We strongly recommend that you don't use the root user for your everyday tasks. Safeguard your root user credentials and use them to perform the tasks that only the root user can perform. For the complete list of tasks that require you to sign in as the root user, see Tasks that require root user credentials in the IAM User Guide.

Important

In the Beijing and Ningxia Amazon Web Services Regions, there is no concept of a root user. All users are IAM users, including the user who created the Amazon Web Services account.

You can change, or reset the root user password, and create, or delete access keys (access key IDs and secret access keys) for your root user. For help signing in using your root user, see Sign in to the Amazon Web Services Management Console as the root user in the Amazon Sign-In User Guide.