4 ms·
> But a few, including AWS, doesn't allow that. IAM users you are correct only allow a single 2fa key (their way of deprecating IAM users), but their SSO Users
by gabeio 2y ago
> But a few, including AWS, doesn't allow that.
IAM users you are correct only allow a single 2fa key (their way of deprecating IAM users), but their SSO Users can have as many as they want and are honestly much better than IAM users. Even for my personal account I've moved to using an SSO User.
- oasisbob 2y agoI don't think this is accurate - I have multiple MFA devices associated with all my AWS IAM users on multiple accounts of various ages. AWS documentation specifies that users are allowed upto eight MFA devices each: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_virtual.html https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credenti...
- gabeio 2y agoInteresting, last I bothered with IAM users they were limited to a single MFA "device" virtual or otherwise. https://aws.amazon.com/blogs/security/you-can-now-assign-multiple-mfa-devices-in-iam/ https://aws.amazon.com/blogs/security/you-can-now-assign-mul... Apparently I haven't bothered with them for a few months and didn't notice, glad they finally added it.
- OJFord 2y agoOh I've either overlooked this too (2022, not just a few months) or there's some caveat like 'one of each type' or something. Will have to try again. Presently have a user per key, named with the end of the keys ID so I know which to use, not brilliant but works.