Amazon Web Services
TMA-AWS-IAM-ROOT-MFA
Ensure MFA is enabled for the root user account
CriticalLevel 1Automatedaws
Description
Ensure MFA is enabled for the root user account (agentless, read-only SDK check).
How it is checked
Audit method: Cloud API check
cloud_check
aws.iam.root_mfaHow it is fixed
Fix method: Guidance or infrastructure patch
Properties
- Operating systems
- Any
- Tags
- cloudaws
- Reference
- CIS Amazon Web Services Foundations Benchmark v7.0.0 - Identity and Access Management
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target aws