Multifactor authentication

As explained in Amazon Web Services in Action, Third Edition: An in-depth guide to AWS

Multifactor authentication is an authentication method that requires evidence from multiple independent credential factors.

Multifactor authentication (MFA) strengthens sign-in by requiring a password plus temporary evidence from another credential factor. In AWS, use it to protect the account root user and IAM users from stolen or cracked passwords and access keys. section 5.3 section 5.3.1

Enable MFA through the AWS Management Console:

• Open Security Credentials from the account name in the top navigation bar, then expand Multi-Factor Authentication. section 5.3.1
• Choose Activate MFA and select Virtual MFA Device. section 5.3.1
• Install a smartphone application supporting TOTP, scan the displayed QR code, and follow the enrollment instructions. section 5.3.1
• Repeat the process for IAM users from IAM, Users, the selected user, Security Credentials, and Assigned MFA Device. section 5.3.4

Protecting AWS sign-in

After MFA is activated for the root user, signing in requires both the account password and a temporary token from the configured MFA device. Keep the token separate from the password; YubiKeys and hardware MFA tokens are also supported. section 5.3.1

Figure 5.5 Protect your AWS account root user with multifactor authentication (MFA).

Use the enrollment figure to follow the virtual MFA setup for the AWS account root user. section 5.3.1

How Amazon Web Services in Action, Third Edition: An in-depth guide to AWS covers it

How deep it goes

Defines MFA and provides console enrollment steps for root users and IAM users, without covering token internals.

Examples

Uses a smartphone TOTP application, QR-code enrollment, virtual MFA devices, YubiKeys, and hardware tokens.

What it assumes

Assumes access to an AWS account or IAM user and a TOTP-capable smartphone application or supported hardware device.

What you can do after

Operate/configure MFA for AWS root users and IAM users through the Management Console.

How it connects

Connects MFA with AWS IAM, root users, passwords, access keys, TOTP, and authentication devices.

liveBookmanning.com

Read Amazon Web Services in Action, Third Edition: An in-depth guide to AWS on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  ASP.NET Core in Action, 3eMultifactor authentication is authentication that requires evidence from multiple independent credential or verification factors.
• 

  liveBookmanning.com
  Acing the CCNA Exam: Volume 2 Advanced Networking and SecurityMultifactor authentication is an identity-verification process that requires authentication factors from multiple categories before granting access.
• 

  liveBookmanning.com
  Microsoft Azure in ActionMulti-factor authentication (MFA) is an authentication technique that requires two or more independent types of evidence to verify an identity.
• 

  liveBookmanning.com
  Data-Driven CybersecurityAn authentication method requiring two or more independent factors to verify a user's identity.
• 

  liveBookmanning.com
  Software Security for DevelopersMultifactor authentication verifies identity using two or more independent authentication factors.
• 

  liveBookmanning.com
  Grokking Web Application SecurityMultifactor authentication is an authentication technique that requires a user to provide at least two distinct forms of identification.
• 

  liveBookmanning.com
  Azure SecurityMultifactor authentication is an authentication method that requires two or more independent factors to verify an identity.
• 

  liveBookmanning.com
  MongoDB 8.0 in Action, Third EditionMFA, or multifactor authentication, verifies an identity using two or more independent authentication factors.

Compare how 9 books explain multifactor authentication →

Related concepts

• Microsoft Entra IDused by · Microsoft Entra ID is Microsoft's cloud-based identity and access-management service for authenticating users, applications, and services and controlling their access to resources.
• authentication factoruses · An authentication factor is an independent category of evidence used to verify a subject’s identity during authentication.
• Keycloakused by · Keycloak is an open-source identity and access management platform that provides authentication, authorization, and single sign-on, including support for identity standards and federation.
• passwordless authenticationincludes · Passwordless authentication is an authentication method that verifies a user’s identity without requiring a conventional password.
• one-time codeused by · A one-time code is a temporary authentication credential accepted for a single attempt or operation, or during a limited validity period.
• inherence factoruses · An inherence factor is an authentication factor based on a distinctive biological or behavioral characteristic of the claimant.

This explainer was generated by Manning's knowledge graph from the text of Amazon Web Services in Action, Third Edition: An in-depth guide to AWS. The section links point to the parts of the book it draws on.