IAM User Uses Virtual MFA

Overview

Check whether IAM users have Hardware MFA enabled. Prioritize the use of Hardware MFA over virtual MFA. To remediate, set up a hardware MFA device for an IAM user using either the AWS Management Console, command line, or the IAM API.

Vendor

AWS

Cloud Service

IAM

Related Controls

References

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_physical.html

Severity

3

Item Types

AWS::IAM::User