Ensure the right login security

As a security administrator, you want to ensure that right login security principles are applied to all the users for their AWS account.

Which of the following should be a part of right security measures to be put in place?

Options

1. Delete any access keys which are present for the root account.
2. Ensure that the root account is used for privileged account activities
3. Have a rotation policy in place for changing the root account password.
4. Both choice 1 and 3
5. All of these