- It should not be used or shared
- It should be shared with trusted administrators
- It should be used for all administrative tasks
- It should be used for accessing AWS services