A root access key is an AWS credential tied to the account root user. Unlike an IAM user key, it represents the highest-privilege identity in the account and can make API requests that affect billing, security settings, resources, and other administrative controls. AWS treats root credentials as exceptional, not routine, because they provide complete account access.
In cyber security, an exposed root access key is a critical risk. If an attacker finds it, they may be able to create new users, disable defenses, exfiltrate data, or incur costly usage before the key is revoked. Defenders should avoid creating root keys, use IAM roles and least privilege instead, and monitor audit logs such as CloudTrail for unusual API calls, unfamiliar IP addresses, or changes to IAM and networking settings. Fast revocation and key rotation are essential when exposure is suspected.