上QQ阅读APP看书，第一时间看更新

Enabling MFA for an IAM user

At this point, you have logged in with an IAM user for the first time, and the next step you need to perform is to enroll your MFA device for the new user. To do this, select Services | IAM to open the IAM console, select Users from the left hand menu, and click on your IAM user.

In the Security credentials tab, click on the pencil icon next to the Assigned MFA device field:

IAM user security credentials

The Manage MFA Device dialog will pop up, which allows you to register a new MFA device. The process for this is identical to how you set up MFA for the root account earlier in this chapter, so I won't repeat the instructions for this, however once you have registered your MFA device, it is important for you to log out and log back in to the console to force MFA authentication.

If you have configured everything correctly, when you log back in to the console, you should be prompted for an MFA code:

MFA prompt