Mfa

class aws_cdk.aws_cognito.Mfa(value)

Bases: enum.Enum

The different ways in which a user pool’s MFA enforcement can be configured.

See

https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-mfa.html

Example:

cognito.UserPool(self, "myuserpool",
    # ...
    mfa=cognito.Mfa.REQUIRED,
    mfa_second_factor=cognito.MfaSecondFactor(
        sms=True,
        otp=True
    )
)

Attributes

OFF

Users are not required to use MFA for sign in, and cannot configure one.

OPTIONAL

Users are not required to use MFA for sign in, but can configure one if they so choose to.

REQUIRED

Users are required to configure an MFA, and have to use it to sign in.