Articles → AWS → Enable MFA For S3 Bucket

Enable MFA For S3 Bucket

In this article, we will enable MFA for S3 bucket.

Purpose

MFA in S3 bucket adds an additional layer of security to prevent accidental deletion of the bucket.

Steps

To implement MFA for S3 bucket, we will work on the following steps: -

Create a S3 bucket
Enable MFA for the account
Write command to enable MFA for S3 bucket
Output

So, let us get started.

Create A S3 Bucket

First, create a S3 bucket.

Picture showing the S3 bucket created in AWS console

Click to Enlarge

Enable MFA For The Account

Second step to enable MFA for the account from which you enable MFA in S3 bucket.

Write Command To Enable MFA For S3 Bucket

Configure CLI and write the following command: -

aws s3api put-bucket-versioning --profile <Your_Profile> --bucket <Bucket_Name> --versioning-configuration Status=Enabled,MFADelete=Enabled --mfa "<ARN_OF_MFA_DEVICE> <Code>"

In the above code: -

Your_Profile → Your profile stored in "c:\users\< username >\.aws\config

Click to Enlarge

Bucket_Name → The S3 bucket on which MFA will be enabled
ARN_OF_MFA_DEVICE → This is the ARN of your MFA device. You can get this value from "Your Security Credentials" section

Picture showing the Your Security Credentials screen for getting the ARN of MFA device

Click to Enlarge

Code → This is the six-digit code generated in authenticator

Once you execute the above command, the MFA is enabled for S3 bucket.

Picture showing the MFA Delete enabled in S3 bucket

Click to Enlarge

Output

Delete the file from the S3 bucket. You will get the following error: -

Picture showing the error message when user is trying to delete an object from S3 bucket

Click to Enlarge

Disable MFA

For disabling MFA, write the following command: -

aws s3api put-bucket-versioning --profile <Your_Profile> --bucket <Bucket_Name> --versioning-configuration Status=Disabled,MFADelete=Enabled --mfa "<ARN_OF_MFA_DEVICE> <Code>"

Posted By -	Karan Gupta

Posted On -	Friday, August 5, 2022

Query/Feedback

Your Email Id

Subject

Query/Feedback	Characters remaining 250