Skip to content

Commit 23fae37

Browse files
author
Pete Emerson
authored
Noted MFA naming requirement (#665)
1 parent 6fd2144 commit 23fae37

File tree

2 files changed

+15
-3
lines changed

2 files changed

+15
-3
lines changed

_docs-sources/guides/reference-architecture/example-usage-guide/02-authenticate/02-setting-up-initial-access.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -60,9 +60,15 @@ Once you have access with the IAM user, be sure to do the following to finish co
6060

6161
1. **Enable MFA**. [Follow these instructions to enable
6262
MFA](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable.html) for your IAM user. It takes
63-
less than a minute and*dramatically* improves your security posture. Moreover, MFA is **required** by the Reference
63+
less than a minute and *dramatically* improves your security posture. Moreover, MFA is **required** by the Reference
6464
Architecture, and you won't be able to access any other accounts without it!
6565

66+
:::note
67+
68+
The name of the MFA **must** be named exactly the same as the AWS IAM Username. This allows your AWS user to create and delete only your own MFA credential.
69+
70+
:::
71+
6672
2. **Logout and log back in**. After enabling MFA, you need to log out and then log back in, thereby forcing AWS to
6773
prompt you for an MFA token. Until you don't do this, you will not be able to access anything else in the web
6874
console!

docs/guides/reference-architecture/example-usage-guide/02-authenticate/02-setting-up-initial-access.md

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -60,9 +60,15 @@ Once you have access with the IAM user, be sure to do the following to finish co
6060

6161
1. **Enable MFA**. [Follow these instructions to enable
6262
MFA](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable.html) for your IAM user. It takes
63-
less than a minute and*dramatically* improves your security posture. Moreover, MFA is **required** by the Reference
63+
less than a minute and *dramatically* improves your security posture. Moreover, MFA is **required** by the Reference
6464
Architecture, and you won't be able to access any other accounts without it!
6565

66+
:::note
67+
68+
The name of the MFA **must** be named exactly the same as the AWS IAM Username. This allows your AWS user to create and delete only your own MFA credential.
69+
70+
:::
71+
6672
2. **Logout and log back in**. After enabling MFA, you need to log out and then log back in, thereby forcing AWS to
6773
prompt you for an MFA token. Until you don't do this, you will not be able to access anything else in the web
6874
console!
@@ -141,6 +147,6 @@ To deploy this new code and create the new IAM users, you will need to:
141147
<!-- ##DOCS-SOURCER-START
142148
{
143149
"sourcePlugin": "local-copier",
144-
"hash": "471a3233265134ad05fc2dc635a9e664"
150+
"hash": "6f90ac986b9bce7cc7433489500eb8dd"
145151
}
146152
##DOCS-SOURCER-END -->

0 commit comments

Comments
 (0)