Configure MFA on AWS

• https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_virtual.html

• FIDO security keys
• Virtual authenticator applications
• Time-based one-time password (TOTP) hardware tokens

Commands

• aws iam create-virtual-mfa-device
• aws iam enable-mfa-device
• aws iam list-mfa-devices
• aws iam list-virtual-mfa-devices
• aws iam list-mfa-device-tags
• aws iam resync-mfa-device
• aws iam tag-mfa-device
• aws iam untag-mfa-device
• aws iam deactivate-mfa-device
• aws iam delete-virtual-mfa-device

Related

• How can I troubleshoot access denied errors related to the Billing and Cost Management console?
• AWS: Allows MFA-authenticated IAM users to manage their own MFA device on the Security credentials page
• AWS Multi-factor authentication in IAM https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable.html
• Assign a virtual MFA device in the AWS Management Console
• YubiKey: ykman info
• aws configure set aws_session_token
• aws organizations create-account
• AWS Authentication

Activities

• Enhance programmatic access for IAM users using a YubiKey for multi-factor authentication

See also

• AWS MFA: list-virtual-mfa-devices | create-virtual-mfa-device | deactivate-mfa-device | delete-virtual-mfa-device | enable-mfa-device | list-mfa-device-tags | list-mfa-devices | list-virtual-mfa-devices | resync-mfa-device | tag-mfa-device | untag-mfa-device
• AWS MFA
• AWS authentication, MFA
• AWS security, AWS Security Hub, AWS CloudTrail, Amazon GuardDuty, Amazon Detective, AWS WAF, AWS Audit Manager, Amazon Fraud Detector, Cloudsploit, AWS Certified Security - Specialty, AWS Security Assurance Services, AWS GDPR, Amazon Inspector, AWS Network Firewall, Zelkova, AWS Zero Trust, Amazon Security Lake, KMS, MFA