I've always been pretty sore about this, that my retail and AWS accounts are linked, with no clear way to disassociate them. If I had known that the accounts were going to be joined at the hip, I would have created my AWS account with a different email.
Using the root account is a poor practice anyway...
Is it really so difficult to imagine that I needed to perform an action that can only be done from the root account?
For example, the pen test authorization request form can only be filled out from the root account.
yeah, I'm pretty sure this could be causing some serious issues with plenty of folks. not sure if it's just the web console or if APIs are affected too, but I sure can't get in.