JPMC Makes AWS Organization More Secure by Removing Thousands of Root Users

Learn how JPMorganChase (JPMC), a leading global financial services firm, enhanced the security of their massive AWS infrastructure by systematically removing root user credentials from thousands of AWS accounts across multiple organizations. This 21-minute conference talk from AWS re:Inforce 2025 demonstrates how a large-scale enterprise subject to stringent regulatory and customer security requirements tackled the complexity of managing thousands of AWS accounts. Discover the strategic approach JPMC used to improve account security, streamline operations, and save significant operator time while maintaining compliance with financial industry regulations. Gain insights into best practices for root user management at enterprise scale, understand the operational challenges of securing large AWS deployments, and explore practical solutions for simplifying AWS account administration in complex organizational structures.