In my ongoing startup infrastructure series, I began by securing the most critical part of any AWS account: the root user and access management layer. This first step is simple, but extremely important: lock down root access and establish a proper identity system. A complete hands-on version of this setup is also available on GitHub repo: https://github.com/skysea-devops/startup-aws-infra-setup-gu