MFA Delete

  • You can optionally add another layer of security by configuring a bucket to enable MFA Delete, which requires additional authentication for either of the following operations:

    • Change the versioning state of your bucket.

    • Permanently delete an object version.

  • MFA Delete requires two forms of authentication together:

    • Your security credentials.

    • The concatenation of a valid serial number, a space, and the six-digit code displayed on an approved authentication device.

  • MFA Delete thus provides added security in the event, for example, your security credentials are compromised.

  • Only the bucket owner can enable and disable MFA Delete.

PreviousConsistency ModelNextAccess Logs

Last updated