Enhance programmatic access for IAM users using a YubiKey for multi-factor authentication

• Sep 2020 https://aws.amazon.com/blogs/security/enhance-programmatic-access-for-iam-users-using-yubikey-for-multi-factor-authentication/

• ykman oath account add -t arn:aws:iam::<ACCOUNT_ID>:mfa/<IAM_USERNAME> <MFA_SECRET>
• ykman oath account code

Obtain TOTP:

• ykman oath code arn:aws:iam::<ACCOUNT_ID>:mfa/<IAM_USERNAME>

Related

• Configure MFA on AWS

See also

• TOTP
• ykman oath [ info | add | code | accounts ]
• YubiKey, Yubico, FIDO security keys, FIDO2, WebAuthn, 5C Nano, YubiKey Manager, ykman