Configure MFA on AWS

• https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_virtual.html

• FIDO security keys
• Virtual authenticator applications
• Time-based one-time password (TOTP) hardware tokens

Commands

• aws iam create-virtual-mfa-device
• aws iam enable-mfa-device
• aws iam list-mfa-devices
• aws iam list-virtual-mfa-devices
• aws iam list-mfa-device-tags
• aws iam resync-mfa-device
• aws iam tag-mfa-device
• aws iam untag-mfa-device
• aws iam deactivate-mfa-device
• aws iam delete-virtual-mfa-device

Related

• How can I troubleshoot access denied errors related to the Billing and Cost Management console?
• Enable MFA in AWS: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable.html
• YubiKey: ykman info
• aws configure set aws_session_token
• aws organizations create-account
• AWS Authentication

Activities

• Enhance programmatic access for IAM users using a YubiKey for multi-factor authentication

See also

• AWS MFA: list-virtual-mfa-devices | create-virtual-mfa-device | deactivate-mfa-device | delete-virtual-mfa-device | enable-mfa-device | list-mfa-device-tags | list-mfa-devices | list-virtual-mfa-devices | resync-mfa-device | tag-mfa-device | untag-mfa-device
• MFA: FreeOTP, Google Authenticator, Okta Verify, Duo Security, Microsoft Authenticator, Strong customer authentication, Dualshield, HOTP, TOTP, OATH, Authy, Push authentication, google-authenticator, Duo Mobile, DenyAllExceptListedIfNoMFA, Configure MFA on AWS, LastPass Authenticator mobile app