AWS > Cognito >

Cognito User Pool MFA enabled

MEDIUM

Source

CloudSploit

cognito-user-pool-mfa-enabled

management console

Cognito User Pool MFA enabled

Ensure that Cognito user pool has MFA enabled.

Enabling Multi-factor authentication (MFA) increases security for your app. You can choose SMS text messages or time-based one-time passwords (TOTP) as second factors to sign in your users.

Recommended Actions

Enter the Cognito service. 2. Enter user pools and enable MFA from sign in experience.

Links

https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-mfa.html

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.