The AWS Support Portal enables account administrators to configure security questions that can be used for authenticating individuals contacting AWS customer support.

Upon the creation of a new AWS account, a default superuser account, referred to as the root account, is automatically provisioned. It is recommended that the usage of this account be strictly limited and tightly controlled. In scenarios where access to the root password is unavailable or the associated MFA token is lost or compromised, recovery of root account access can be facilitated through the authentication of pre-configured security questions and corresponding answers. To ensure this recovery mechanism is available, security questions should be established and registered early in the account creation process.