This article has been indexed from DZone Security Zone
As a security best practice, AWS recommends that users with privileged permissions should use MFA for extra security measures.
As an AWS administrator, it is your job to make sure users enable MFA. In order to auto-enable this feature, the below policy can be applied to users, which will allow them to enable MFA if it is not enabled already. Once MFA is enabled, only then other activities can be resumed.
Read the original article: Force MFA for AWS IAM Users