Query: 1.4 Ensure that multi-factor authentication is enabled for all RAM users that have a console password

Description

Multi-Factor Authentication (MFA) adds an extra layer of protection on top of a username and password. With MFA enabled, when a user logs on to Alibaba Cloud, they will be prompted for their user name and password followed by an authentication code from their virtual MFA device. It is recommended that MFA be enabled for all users that have a console password.

Query

Tables used in this query:

• alicloud_ram_credential_report

Controls using this query:

• 1.4 Ensure that multi-factor authentication is enabled for all RAM users that have a console password

SQL