Query: Ensure that the root user account has MFA enabled for console access

Description

This control checks whether the root user account has multi-factor authentication (MFA) enabled for console access. The control fails if the root user account does not have MFA enabled for console access.

Query

Tables used in this query:

• aws_iam_account_summary

Controls using this query:

• 1.4 Ensure MFA is enabled for the 'root' user account
• 1.5 Ensure MFA is enabled for the 'root' user account
• 2.4 Ensure MFA is enabled for the 'root' user account
• Ensure that the root user account has MFA enabled for console access

SQL