# Key Security Steps After Creating Your AWS Account Hey there, You've just created your AWS account—exciting! Before you get started, let's make sure you do a few things to keep your account safe and secure. Let's dive in. --- ### Task 1: Assign MFA to your root account. After creating your AWS account, you become the root user, which means you have all the privileges. It's crucial to secure your account properly. On your account, on right top corner, Click on and then Select `Security Credentials`. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715426090675/b2f4754d-54f9-408f-9df0-988e4862a61c.png align="left") You'll see like the following interface. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715425916391/597ffb64-14ce-4d65-b6a7-dc4fd2abe05e.png align="center") Click on Assign MFA. Name your MFA device. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715425954069/c19d520c-2a62-44e9-8051-33824f33aaef.png align="left") I'm using Authenticator app for MFA purpose. It authenticates using a code generated by an app on your mobile device. This code is unique and valid only for a short time, adding an extra layer of security to your accounts. There are multiple authenticator apps. I've installed Google's `Google Authenticator`. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715426507259/01f4b1d6-024d-48d5-b319-1409a27e1ffe.png align="center") ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715425990749/e505c575-5d86-40ce-ac2e-ee1b093f9fcd.png align="left") Scan the QR code from your authenticator app. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715426006894/76bfc1bf-89a0-428a-be41-900ada850140.png align="left") Fill the two consecutive codes from your Authenticator device. So, our first task is completed. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715426731779/60b76eaf-b255-453a-b3c1-fe93070fc0f7.png align="center") --- ### Task 2: Create Budget Alert Click on `Billing & Cost Management`. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715426848369/c045b5fb-75cb-4835-8aa8-89086c4f836d.png align="left") Scroll a bit and click on `Billing Preferences`. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715426933084/cb40f6c2-4c49-4c83-9cc8-63043d0af421.png align="left") Now Click on the check boxes as below and provide your email address to receive Free Tier usage alerts. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715427035044/185e9185-a05c-4fef-ab99-6a27dd8f3028.png align="center") Now, we've setup our Billing preferences. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715427045656/184fda72-657b-47e3-82e5-f3075813a0e8.png align="center") On Billing & Cost Management section, click on `Budgets`. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715427247781/2fbeea99-8a12-49a6-9de8-65f0490f1e39.png align="left") Create a budget. Choose Customize option on Budget setup. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715427486206/4b0a4e73-a441-47e6-83dc-6cf9611434c3.png align="center") Scroll a bit and Click on `Next`. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715427733077/c324c2ef-81f6-49f9-aa90-f1e4cac69956.png align="center") Provide name for your budget and also enter your budgeted amount. Scroll down and Click on `Next`. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715427809799/a552e36a-154e-4ff7-87d3-12e523258140.png align="center") Click on `Add an alert threshold`. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715427903340/d9cde314-f7e2-4a4d-9844-e9a89e076dba.png align="center") In my case, I've applied 50%. Provide your desired Email recipients. When your actual cost is greater than **50.00% ($5.00)** of your **budgeted amount ($10.00)**, the alert threshold will be exceeded. Click on `Next`. Review all of your information and click on Create Budget. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715428282003/372dcbc9-3e60-4fcf-ab57-d9fa5c424b9e.png align="center") That completes our second task. --- ### Task 3: Create an IAM user. **Why we need IAM user?** Daily tasks with the root user in AWS are risky, like giving everyone a house key. IAM users are better - create specific users with limited access, like assigning keys only to certain rooms. This keeps your AWS environment more secure! Alright, On the services, search for IAM and click on it. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715428604736/8c94b365-546c-4b7f-9d79-ae9e0521e2bd.png align="center") ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715428648795/963f8daf-b4f2-45b7-b58e-58e3141e7f27.png align="center") Click on Users and then `Create user` and provide a suitable username with password. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715474258773/bff15e16-e2cd-42d9-b1aa-a477a17c2f6d.png align="center") Click on `Next`. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715474415433/6f5957b8-9145-492a-89f2-1c644231ec04.png align="center") Search for Administrator Access, tick the box and Click on `Next`. Review what you've done and proceed to `Create user`. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715474547082/c8943561-b4a4-4fc9-9c77-9be2d6e2f5e6.png align="center") Return to dashboard. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715474632229/2ae236a4-bf3d-4bd2-b033-0af2d508a6f8.png align="left") Click on `Create` below Account Alias. An AWS account alias is a custom name for your account ID, making it easier to remember and use when accessing AWS services. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715474676216/04b09558-a9c5-4b61-b52a-b28bf8754e17.png align="left") Provide your preferred name. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715474759617/a33bea6c-8db9-49ea-8f0a-4505c10702c2.png align="left") Copy the given `Sign-in URL` and paste it into your browser and bookmark it. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715474805555/b37950ea-6f83-431d-8c3b-c5a59a7789e4.png align="left") ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715474945276/a071cc6d-961c-49fa-b208-4b99976006e0.png align="center") Provide your IAM username and enter password to `Sign in`. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715475019083/a0339058-1e1b-4f7b-9465-58cb2135a773.png align="left") We've signed in as an IAM user. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715475086448/80a233f4-4736-42cc-b9a9-d52a786eaad8.png align="left") Click on `Security credentials`, for this new identity we've to setup MFA just like we did earlier for our root account. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715475151209/73ac4fc2-69e7-49dc-9d95-c456a12bc23f.png align="center") Assign MFA and do as we did earlier. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1715475273370/8a9cc56b-37a9-4d2f-a48a-0163d2caa2d1.png align="center") I hope you've done yours as well. Alright. We've finished the account setup and securing process. This concludes the blog. --- In a nutshell, we accomplished the following: 1. Assigned MFA to root account, 2. Created a Budget Alert, 3. Created IAM user and assigned MFA. Hope you guys had a wonderful time. See you again in the next one.