Query: iam_user_mfa_for_user

select
  case
    when mfa_enabled then 'Enabled'
    else 'Disabled'
  end as value,
  'MFA Status' as label,
  case
    when mfa_enabled then 'ok'
    else 'alert'
  end as type
from
  aws_iam_user
where
  arn = $1