Control: AWS > PCI v3.2.1 > IAM > 6 MFA should be enabled for all IAM users

This control checks whether the IAM users have multi-factor authentication (MFA) enabled.

PCI requirement(s): 8.3.1

Resource Types

This control targets the following resource types:

Control Type URI

tmod:@turbot/aws-pciv3-2-1#/control/types/iamUserMfaEnabled

Category URI

tmod:@turbot/turbot#/control/categories/compliancePci

GraphQL

query controlType(id: "tmod:@turbot/aws-pciv3-2-1#/control/types/iamUserMfaEnabled") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-pciv3-2-1#/control/types/iamUserMfaEnabled'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-pciv3-2-1#/control/types/iamUserMfaEnabled"