MFA should be enabled for all IAM users that have a console password

CIS

Description

Verifies that MFA is enabled for all IAM users with a console password.

To enable MFA for IAM users with a console password, follow these steps:

Sign in to the AWS Management Console with an account that has IAM permissions.
Open the IAM console at https://console.aws.amazon.com/iam/.
In the navigation pane, click on 'Users'.
Choose the IAM user who has a console password and for whom you want to enable MFA.
Under the 'Security credentials' tab, in the 'Assigned MFA device' section, click on 'Manage'.
Choose the type of MFA device to assign and follow the on-screen instructions.
Enter two consecutive MFA codes from the application to finalize setup.
Confirm that the MFA device is successfully associated with the IAM user.

CIS