How not to get locked out of your AWS account

A few weeks ago, a nightmare-level situation began to unfold. A routine login attempt to the AWS console for fossable.org suddenly hit me with an email verification challenge: My choice of recovery email for the root account was a bit of a problem. It actually belonged to the fossable.org domain itself, hosted by an email server within the very same AWS account I was trying to login to. A server…