MFA in s3 buckets

[securylight]

Using Terraform one can create an s3 bucket.
when the Terraform doesn't include the MFA feature, KICS identifies it as a high finding.
but, it's not possible to config MFA on buckets using Terraform.
A possible solution is to use AWS cli after the Terraform and then use Terraform refresh.

it might be a good idea to write something about it, in kics report.

Links about Terraform doesn't support MFA in IaC with buckets:

hashicorp/terraform-provider-aws#629
hashicorp/terraform#12973

Terraform refresh

https://www.hashicorp.com/blog/detecting-and-managing-drift-with-terraform

Terraform with MFA

bucketmfa.tf.txt

Specifications

• Version: v1.3.2
• Platform: Terraform
• Subsystem:

[rogeriopeixotocx]

There's a chance we can solve this once we get post tfplan scanning working #3903