3 ms·
But only for the web console, not via the CLI. The API for generating short-term keys (which aws-vault uses) only supports TOTP, not FIDO/U2F/WebAuthn. https:/
by drodgers 5y ago
But only for the web console, not via the CLI. The API for generating short-term keys (which aws-vault uses) only supports TOTP, not FIDO/U2F/WebAuthn.
https://github.com/aws/aws-cli/issues/3607 https://github.com/aws/aws-cli/issues/3607
- OJFord 5y agoSure, but I was responding to 'Yubikey', not about any specific protocol. I'm not claiming it's ideal, but it works, with one Yubikey per IAM user: https://aws.amazon.com/premiumsupport/knowledge-center/authenticate-mfa-cli/ https://aws.amazon.com/premiumsupport/knowledge-center/authe...