AWS locks down cloud security, hits 100% MFA enforcement for root users

AWS announced at re:Inforce that it now enforces multi-factor authentication (MFA) for all root users across all AWS account types, aligning with CISA’s Secure by Design pledge. The company also introduced and previewed security enhancements including IAM Access Analyzer visibility into internal access, expanded Security Hub prioritization leveraging GuardDuty Extended Threat Detection (now supporting EKS), and a new Shield “network security director” for network security posture management to help defend against threats like DDoS and SQL injection.