AWS is pushing ahead with MFA for privileged accounts. What that means for you ...

AWS is mandating multi-factor authentication for root users—initially within AWS Organizations and from July for standalone accounts—with a 30-day grace period, and is adding support for FIDO2 passkeys to make strong authentication easier across devices. Framed by rising credential-based attacks and the Snowflake-related breaches, AWS positions MFA as a critical control to mitigate credential stuffing, spraying, and brute-force attempts while improving usability through passkeys.