4 ms·
One approach is to (auto)nag users to enable MFA and (auto)disable console access if failed to do so. AWS Console with MFA enabled will require MFA. They can
by hrez 5y ago
One approach is to (auto)nag users to enable MFA and (auto)disable console access if failed to do so.
AWS Console with MFA enabled will require MFA.
They can self-manage MFA/password at any point.
- kstrauser 5y agoThat's an option but it doesn't really scale across a lot of employees. There are many things I'd rather be doing than pestering new employees to enable MFA, when literally every other service we use that offers MFA has a checkbox to require it at the company level.
- hrez 5y agoIf you don't do it manually that scales just fine.