Mfa

class aws_cdk.aws_cognito.Mfa(value, names=None, *, module=None, qualname=None, type=None, start=1, boundary=None)

Bases: Enum

The different ways in which a user pool’s MFA enforcement can be configured.

See:: https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-mfa.html
ExampleMetadata:: infused

Example:

cognito.UserPool(self, "myuserpool",
    # ...
    mfa=cognito.Mfa.REQUIRED,
    mfa_second_factor=cognito.MfaSecondFactor(
        sms=True,
        otp=True,
        email=False
    )
)

Attributes

OFF: Users are not required to use MFA for sign in, and cannot configure one.

OPTIONAL: Users are not required to use MFA for sign in, but can configure one if they so choose to.

REQUIRED: Users are required to configure an MFA, and have to use it to sign in.