MFA should be enabled for all IAM users that have a console password

CIS

Description

Checks if MFA is enabled for all IAM users that have a console password.

To enable MFA for IAM users with a console password, follow these steps:

Sign in to the AWS Management Console with an account that has IAM permissions.
Open the IAM console at https://console.aws.amazon.com/iam/.
In the navigation pane, click on 'Users'.
Choose the IAM user who has a console password and for whom you want to enable MFA.
Under the 'Security credentials' tab, in the 'Assigned MFA device' section, click on 'Manage'.
Choose the type of MFA device to assign (virtual or hardware), and then follow the on-screen instructions to activate the MFA device.
If using a virtual MFA device, use an MFA application to scan the QR code or enter the configuration key, then enter two consecutive MFA codes from the application to finalize setup.
Confirm that the MFA device is successfully associated with the IAM user.

CIS