https://docs.aws.amazon.com/general/latest/gr/root-vs-iam.html