S3 buckets should have 'MFA Delete' enabled

s3
This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

Enabling MFA Delete on S3 buckets requires two forms of authentication whenever there is an attempt to change the versioning state or delete an object version. This additional layer of security is crucial in protecting against unauthorized or accidental deletions.

Remediation

For configuration instructions on enabling MFA Delete using the AWS CLI, refer to Setting Up MFA Delete.