diff --git a/rules/integrations/aws/privilege_escalation_root_login_without_mfa.toml b/rules/_deprecated/privilege_escalation_root_login_without_mfa.toml
similarity index 98%
rename from rules/integrations/aws/privilege_escalation_root_login_without_mfa.toml
rename to rules/_deprecated/privilege_escalation_root_login_without_mfa.toml
index d71d1635112..71d669717c0 100644
--- a/rules/integrations/aws/privilege_escalation_root_login_without_mfa.toml
+++ b/rules/_deprecated/privilege_escalation_root_login_without_mfa.toml
@@ -1,8 +1,9 @@
 [metadata]
 creation_date = "2020/07/06"
 integration = ["aws"]
-maturity = "production"
-updated_date = "2025/10/10"
+deprecation_date = "2025/11/21"
+maturity = "deprecated"
+updated_date = "2025/11/21"
 
 [rule]
 author = ["Elastic"]