title: Why is Role switching not allowed when logged in as AWS root user?
body: <p>As per AWS documentation <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-console.html" rel="nofollow noreferrer">here</a> - <strong>You cannot switch roles when you sign in as the AWS account root user</strong>.</p>
  
  <p>If we go by AWS best practices i.e. not to use root user to perform actions, this restriction makes sense &amp; supports why AWS does not allow role switch as root user. However, when using a Bucket policy, a root user in one account can access a Bucket in another account &amp; AWS does not seem restricting that unlike roles (Technically, both are cross account actions using resource policies). </p>
  
  <p>Why does this 'root user restriction' apply only for roles and not buckets - Any security reasons?</p>