❌ Using root user credentials for console access
→Switch to IAM user immediately after creation
❌ Ignoring billing setup leading to surprise charges
→Always enable budget alerts during signup
❌ Skipping MFA on root account
→Enable hardware/virtual MFA before any resource creation