I have been managing an AWS account for about a year. Typical "*best practices*" security setup:

* 1 Root Account
* Multiple non-Root accounts, including the one I use on a daily basis
* All accounts using MFA (I personally use the Google Authenticator app)

I would like to now transfer "ownership" of this entire AWS account (Root account & all) to someone else. While I can certainly give them the username + password to login as Root, they will need MFA setup as well.

The only way I can think of handling this is to:

1. Disable MFA on the Root account
2. Give them the logins for the Root account
3. Trust that they will re-enable MFA as soon as possible

Does the AWS web console provide any better solutions? I'm not even sure if its *possible* to disable MFA on an account (let alone Root) once its set...

Thanks in advance!