Creating IAM users, groups, and roles

After securing your root account using MFA, you should next immediately create identity access and management (IAM) users, groups, and roles in your account for day-to-day access. IAM is the recommended approach for day-to-day administration and access to your AWS account and you should restrict root account access for billing or emergency purposes only. Before you can continue, you will need to know your AWS account ID, which you can see in the previous screenshot, in the serial number of your MFA device (note that this will be a different number than that which is shown). Write this account number down, as it will be required as you configure various IAM resources.

Creating IAM roles

...