AWS Mandates Multifactor Authentication for Enhanced Security
Starting in mid-2024, Amazon Web Services (AWS) will require users to employ multifactor authentication (MFA) when logging into their AWS Management Console, a decision aimed at bolstering AWS's security measures.
Steve Schmidt, Amazon's VP of security engineering and chief security officer, announced the decision today. He emphasized the commitment to enhancing the inherent security of AWS customer environments, starting with their most high-level users. Schmidt said, "From mid-2024 onwards, users accessing the AWS Management Console with the root user of an AWS Organizations management account must enable MFA." AWS will inform customers who need to activate MFA through various methods, including console login prompts.
This MFA mandate will expand beyond just AWS Management root users. AWS intends to necessitate MFA for other contexts, like standalone accounts and those external to an AWS organization.
Unlike many platforms where MFA is optional, AWS is making it obligatory. For those eager to activate MFA ahead of the deadline, AWS currently offers this feature. Schmidt encourages users to refer to the AWS Identity and Access Management (IAM) user guide for MFA activation instructions and mentions the availability of a free security key for eligible customers. He stressed the importance of adopting MFA, especially those resistant to phishing, such as security keys.
Loading Comments ...
Comments
No comments have been added for this post.
You must be logged in to make a comment.