From 11f53b2a12e49ee8d974b7629f5ebd118a4cdd30 Mon Sep 17 00:00:00 2001
From: Isai <59296946+imays11@users.noreply.github.com>
Date: Fri, 21 Nov 2025 16:29:53 -0500
Subject: [PATCH] [Deprecation] Deprecated - AWS Root Login Without MFA

Completing Deprecation Process for this rule. It has now been included in our ruleset with `Deprecated -` prefix for 2 release cycles and should now be moved to our `_deprecated` folder.
---
 .../privilege_escalation_root_login_without_mfa.toml         | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)
 rename rules/{integrations/aws => _deprecated}/privilege_escalation_root_login_without_mfa.toml (98%)

diff --git a/rules/integrations/aws/privilege_escalation_root_login_without_mfa.toml b/rules/_deprecated/privilege_escalation_root_login_without_mfa.toml
similarity index 98%
rename from rules/integrations/aws/privilege_escalation_root_login_without_mfa.toml
rename to rules/_deprecated/privilege_escalation_root_login_without_mfa.toml
index d71d1635112..71d669717c0 100644
--- a/rules/integrations/aws/privilege_escalation_root_login_without_mfa.toml
+++ b/rules/_deprecated/privilege_escalation_root_login_without_mfa.toml
@@ -1,8 +1,9 @@
 [metadata]
 creation_date = "2020/07/06"
 integration = ["aws"]
-maturity = "production"
-updated_date = "2025/10/10"
+deprecation_date = "2025/11/21"
+maturity = "deprecated"
+updated_date = "2025/11/21"
 
 [rule]
 author = ["Elastic"]