Improving Your Security Posture with MFA
MFA is a security feature that enhances the authentication process by requiring users to input a six-digit token in addition to their usernames and passwords. AWS strongly recommends enabling MFA for your root user account and IAM users to increase security.
When MFA is enabled, a trusted source must provide an authentication code to access the Management Console. MFA can be set up for API calls to AWS and user console logins using a hardware- or software-based (virtual) MFA device.
AWS offers the Universal 2nd Factor (U2F) as an MFA option based on an open authentication standard. U2F can use specialized USB keys or near-field communication (NFC) devices such as smart card technology, but AWS only supports USB-based U2F and not NFC devices for MFA.
For more details on U2F, feel free to review the information at https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_u2f.hml.
Security Token-Based MFA
Users must...