Terraform May Bypass AWS IAM MFA Limit

Question

I use Terraform to manage AWS resources.

Terraform calls the IAM administrative user that was blocked by the MFA. But the team terraform applyand terraform destroywith my local computer successfully introduced a unique authentication code.

So, does Terraform bypass multi-factor authentication?

Answer 1

Terraform is usually configured using API credentials. By default, MFA does not apply to API calls. You must configure and accept the role intended exclusively for this if you want to enable multi-factor authentication when calling APIs for specific requests (for example, TerminateInstances).

For more information see

AWS Blog: How to Enable MFA Protection on Your AWS API Calls

Terraform Documentation: AWS