AWS IAM medium security documentation change

Service: IAM · 2025-06-25 · Security-related medium

File: IAM/latest/UserGuide/iam_example_iam_DeleteVirtualMfaDevice_section.md

Summary

Added PowerShell V5 examples for deleting virtual MFA devices including conditional deletion after checking device type

Security assessment

The change demonstrates proper MFA device management including disabling and deleting unused virtual MFA devices, which helps prevent unauthorized access through abandoned MFA devices. Example 2 shows security-conscious cleanup of MFA associations.

Diff

diff --git a/IAM/latest/UserGuide/iam_example_iam_DeleteVirtualMfaDevice_section.md b/IAM/latest/UserGuide/iam_example_iam_DeleteVirtualMfaDevice_section.md
index 0844ababf..50b7d6a92 100644
--- a//IAM/latest/UserGuide/iam_example_iam_DeleteVirtualMfaDevice_section.md
+++ b//IAM/latest/UserGuide/iam_example_iam_DeleteVirtualMfaDevice_section.md
@@ -59,0 +60,24 @@ PowerShell
+**Tools for PowerShell V5**
+    
+
+**Example 1: This example deletes the IAM virtual MFA device whose ARN is`arn:aws:iam::123456789012:mfa/bob`.**
+    
+    
+    Remove-IAMVirtualMFADevice -SerialNumber arn:aws:iam::123456789012:mfa/bob
+    
+
+**Example 2: This example checks to see whether the IAM user Theresa has an MFA device assigned. If one is found, the device is disabled for the IAM user. If the device is virtual, then it is also deleted.**
+    
+    
+    $mfa = Get-IAMMFADevice -UserName Theresa
+    if ($mfa) { 
+        Disable-IAMMFADevice -SerialNumber $mfa.SerialNumber -UserName $name 
+        if ($mfa.SerialNumber -like "arn:*") { Remove-IAMVirtualMFADevice -SerialNumber $mfa.SerialNumber }
+    }
+    
+
+  * For API details, see [DeleteVirtualMfaDevice](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. 
+
+
+
+