AWS IAM : Authentication & Authorization for your Cloud Infra

When you create an AWS account for the first time, you get root access. Root means unrestricted - you can create, modify, delete anything across every service, touch billing, nuke entire environments.