You configure MFA delete on a bucket to help ensure that the data in your bucket cannot be accidentally deleted. MFA-protected API access is used to enforce another authentication factor (MFA code) when accessing sensitive Amazon S3 resources.

受 MFA 保护的 API 访问用于在访问敏感的 Amazon S3 资源时，强制执行其他身份验证因素（MFA 代码）。 您可以要求使用 MFA 创建的临时证书来完成针对这些 Amazon S3 资源的任何操作。

我想为我的 Amazon Simple Storage Service（Amazon S3）桶启用多重身份验证（MFA）删除功能，以保护我的对象免遭意外删除。 简短描述 如果您未 配置 MFA 删除功能 ，则具有以下任一权限的任何人都可以永久删除 Amazon S3 对象：

2023年8月6日 · To fortify the security of your Amazon S3 buckets, one of the most effective measures is to enable Multi-Factor Authentication (MFA). In this blog, we will explore what MFA is, why it...

2024年6月20日 · 三、s3 存储桶启用mfa删除操作. 启用根账户mfa删除来保护指定的存储桶。 注意：只有存储桶所有者（根账户）可以启用 mfa delete. 通过iam控制面板，可以看到根用户拥有mfa。，若没有设置mfa，可以参考第一部分添加mfa设备。

2021年3月26日 · 本文档详细介绍了如何使用aws cli为s3启用多因素认证（mfa）删除和版本控制。 首先，确保root用户已设置MFA，并配置了S3版本控制。 然后，使用CLI配置根用户的accesskey，并通过`aws s3api put-bucket-versioning`命令启用MFA删除。

To configure MFA delete for your bucket, complete the following steps: Generate an access key and secret key for the root user. Activate an MFA device for the root user. Configure the AWS CLI with the root user credentials. Configure MFA delete. Confirm that MFA delete is working, and delete your root access keys.

2024年3月11日 · In this article, we'll see how to secure your S3 data in addition to the IAM policies through the MFA assignment. Furthermore, we'll cover how to set up MFA Delete for your AWS S3 bucket and its usage while deleting an object from the S3.

2024年10月22日 · Amazon S3 MFA Delete is a powerful feature that adds an extra layer of security to your S3 buckets. By requiring multi-factor authentication for permanent object deletions and versioning suspensions, MFA Delete helps protect your data from unauthorized changes.

Delete an object in a versioning-enabled bucket that is MFA delete–enabled by including the request header of the object version.