If you only own a single AWS account, you’re facing a serious security risk! This post will show you why this a problem and how you can solve it.

The use AWS CLI with role delegation protected by MFA you need to:

• Get a session token from STS for an IAM user using MFA
• Assume a role in a account you want to work with

AWS CLI has built in support for MFA and role delegation. The mfacli.sh script in this repository is no longer the best way to solve the problem. Read our in-depth instructions about how to solve the problem with the AWS CLI itself.