AWS IAM high security documentation change
Summary
Added PowerShell V5 examples for enabling MFA devices including virtual MFA setup
Security assessment
Demonstrates proper MFA device enrollment which directly impacts account security by enabling multi-factor authentication
Diff
diff --git a/IAM/latest/UserGuide/iam_example_iam_EnableMfaDevice_section.md b/IAM/latest/UserGuide/iam_example_iam_EnableMfaDevice_section.md index ade329903..fa809a02e 100644 --- a//IAM/latest/UserGuide/iam_example_iam_EnableMfaDevice_section.md +++ b//IAM/latest/UserGuide/iam_example_iam_EnableMfaDevice_section.md @@ -60,0 +61,22 @@ PowerShell +**Tools for PowerShell V5** + + +**Example 1: This command enables the hardware MFA device with the serial number`987654321098` and associates the device with the user `Bob`. It includes the first two codes in sequence from the device.** + + + Enable-IAMMFADevice -UserName "Bob" -SerialNumber "987654321098" -AuthenticationCode1 "12345678" -AuthenticationCode2 "87654321" + + +**Example 2: This example creates and enables a virtual MFA device. The first command creates the virtual device and returns the device's object representation in the variable`$MFADevice`. You can use the `.Base32StringSeed` or `QRCodePng` properties to configure the user's software application. The final command assigns the device to the user `David`, identifying the device by its serial number. The command also synchronizes the device with AWS by including the first two codes in sequence from the virtual MFA device.** + + + $MFADevice = New-IAMVirtualMFADevice -VirtualMFADeviceName "MyMFADevice" + # see example for New-IAMVirtualMFADevice to see how to configure the software program with PNG or base32 seed code + Enable-IAMMFADevice -UserName "David" -SerialNumber -SerialNumber $MFADevice.SerialNumber -AuthenticationCode1 "24681357" -AuthenticationCode2 "13572468" + + + * For API details, see [EnableMfaDevice](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. + + + +