The latest articles on DEV Community by VIRAJ SARDHANA (@viraj_sardhana_d1bfa82bc9). https://dev.to/viraj_sardhana_d1bfa82bc9 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F2520431%2F413baf50-fdf6-4981-b78b-6138073e0858.png https://dev.to/viraj_sardhana_d1bfa82bc9 en VIRAJ SARDHANA Wed, 04 Dec 2024 04:05:54 +0000 https://dev.to/viraj_sardhana_d1bfa82bc9/how-can-i-enforce-mfa-before-switching-roles-and-using-ssm-login-in-aws-2lm https://dev.to/viraj_sardhana_d1bfa82bc9/how-can-i-enforce-mfa-before-switching-roles-and-using-ssm-login-in-aws-2lm <p>Description:</p> <p>I need to enforce Multi-Factor Authentication (MFA) as a prerequisite for two actions in AWS:</p> <p>Switching roles: I want users to authenticate with MFA before they can assume a different IAM role. SSM login: I need to enforce MFA for users before they can use AWS Systems Manager (SSM) to log in to EC2 instances. I know that MFA can be enabled for IAM users, but I’m struggling to enforce it for these specific actions.</p> <p>Has anyone implemented this setup or have suggestions on how to enforce MFA during these workflows? Any examples of IAM policies or configurations would be greatly appreciated!</p> aws devops ssm cloud