The default RHEL system is set up without a root password—you must use sudo to gain root privileges. The /etc/sudoers file enables the ec2-user to execute any command without providing a password.

How-To How to Be Notified When Someone Logs In with Your AWS Root Account By Brien Posey 03/29/2024 Amazon has long recommended that you use your AWS root account as seldom as possible, using instead ...

AWS is introducing central management for root credentials to minimize malicious use and the burden on security teams.

After the initial account set up, you should provision more limited identity and access management (IAM) administrator accounts or roles as needed. 2) Immediately delete or deactivate any root account ...