AWS Certified Cloud Practitioner — Question 755

Which task can only an AWS account root user perform?

Answer options

• A. Changing the AWS Support plan
• B. Deleting AWS resources
• C. Creating an Amazon EC2 instance key pair
• D. Configuring AWS WAF

Correct answer: A

Explanation

Modifying an AWS Support plan is a highly privileged administrative action restricted exclusively to the AWS account root user. Other tasks, such as deleting AWS resources, generating Amazon EC2 key pairs, and configuring AWS WAF, can be delegated to IAM identities using appropriate permissions policies.