MTF in IAM

[Domingo Aguilera @batok]

AWS announces Multifactor Authentication for IAM.

This is a great feature.  I've just created a virtual device and associated to a IAM user, using the command line tools ( java based ).

I have no idea how long it would take to adapt the connection process in boto to recognize tokens generated with an MTF virtual or phisical device.

Hope not much.

[Domingo Aguilera @batok]

MTF must be MTA

[Mitchell Garnaat]

Hi -

I pushed code to the develop branch to support this feature soon after it was announced.  The change in boto is quite small.  Basically, there are now two extra, optional parameters to the get_session_token method:

http://docs.pythonboto.org/en/latest/ref/sts.html#boto.sts.STSConnection.get_session_token

These parameters allow you to pass in the serial number of your MFA device and the 6 digit token from the device.  If these are valid, a new MFA session token is returned.  Otherwise, you get an error.

Mitch