AWS Identity and Access Management
Using IAM (API Version 2010-05-08)
« PreviousNext »
View the PDF for this guide.Go to the AWS Discussion Forum for this product.Go to the Kindle Store to download this guide in Kindle format.Did this page help you?  Yes | No |  Tell us about it...

Checking MFA Status

Use the IAM console to verify that an MFA device is enabled and configured for the root account or IAM user. In this section, you'll learn how to check whether a root account or IAM user has a valid MFA device enabled.

To check the MFA status of a root account

  1. Open the IAM console at https://console.aws.amazon.com/iam.

  2. In the IAM Dashboard, check under Security Status to see whether MFA is enabled or disabled.

    The root user MFA status
  3. Click Manage MFA Device to change the current setting.

To check the MFA status of an IAM user

  1. Open the IAM console at https://console.aws.amazon.com/iam.

  2. Select Users.

  3. Select the user.

    In the Security Credentials tab of the user's details pane, if the user has an MFA device enabled, the Multi-Factor Authentication Device item shows a value for the device.

    The IAM user MFA status

    The Multi-Factor Authentication Device is either a value for a virtual device, such as arn:aws:iam::123456789012:mfa/user, or it is the device serial number for a hardware device (usually the number from the back of the device), such as GAHT12345678.

  4. Click Manage MFA Device to change the current setting.

    For virtual device information, see Using a Virtual MFA Device with AWS.

    For hardware device information, see Enabling a Hardware MFA Device for Use with AWS.