Mfa¶

class aws_cdk.aws_cognito.Mfa(value)¶

Bases: enum.Enum

The different ways in which a user pool’s MFA enforcement can be configured.

See: https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-mfa.html

Example:

cognito.UserPool(self, "myuserpool",
    # ...
    mfa=cognito.Mfa.REQUIRED,
    mfa_second_factor=cognito.MfaSecondFactor(
        sms=True,
        otp=True
    )
)

Attributes

OFF¶: Users are not required to use MFA for sign in, and cannot configure one.

OPTIONAL¶: Users are not required to use MFA for sign in, but can configure one if they so choose to.

REQUIRED¶: Users are required to configure an MFA, and have to use it to sign in.