AWS ROOT access alarm
Here's the easy instruction on how to set up the ROOT access alarm: https://aws.amazon.com/premiumsupport...
This demo shows how fast you could be alerted if someone accessed ROOT.
I said in this video "under 20 sec" but it actually took 21 secs so apologies, but on my phone the txt showed up a little faster than on web.