Provision MFA-protected AWS CLI sessions using aws-vault.
npx skills add https://github.com/mizchi/skills --skill aws-vault-mfa-iam
Please help me install this Agent Skill. Skill: aws-vault-mfa-iam Source: https://github.com/mizchi/skills/tree/main/aws/vault-mfa-iam Command: npx skills add https://github.com/mizchi/skills --skill aws-vault-mfa-iam
Resolve MFA-required IAM access errors by routing through aws-vault to establish MFA-protected sessions for AWS CLI/SDK usage.
Register a virtual MFA device for your AWS user, add mfa_serial to your ~/.aws/config, and run aws-vault exec <profile> -- <aws-command> to complete an MFA-enabled session.
High-intent search queries and answers about installing and using this skill.
Use aws-vault exec to run AWS CLI commands within an MFA-protected session. By configuring a virtual MFA device and adding mfa_serial to your AWS config, aws-vault automatically handles MFA authentication for IAM API calls.
InvalidClientTokenId errors occur when IAM policies require MFA but the CLI session lacks it. Routing commands through aws-vault exec establishes an MFA-enabled session, resolving the authentication failure and allowing IAM operations.
You need a registered virtual MFA device for your AWS IAM user and an updated ~/.aws/config file containing the mfa_serial value. aws-vault then uses this configuration to prompt for and manage your MFA-backed sessions.
Add the mfa_serial parameter to your AWS config profile and execute commands using aws-vault exec. This setup provisions MFA-protected sessions automatically, preventing manual MFA code entry on every individual AWS API call.
Yes, aws-vault exec routes IAM API calls through an MFA-authenticated session. This satisfies AWS policies that enforce MFA for iam:* actions, ensuring your CLI operations comply with security requirements without failing.
aws-vault resolves MFA-required IAM access by provisioning secure sessions for both AWS CLI and SDK usage. It leverages the mfa_serial configuration to authenticate via your virtual MFA device and establish valid temporary credentials.
benjaminshafiiConfigure Bitwarden CLI with API key authentication to retrieve vault credentials.
Tyler-R-KendrickDiscover, validate, and create AWS SageMaker IAM execution roles.
mreferreCreate IAM roles and instance profiles for EC2 to access AWS services.
takeokunnAutomates AWS CLI and Terraform workflows for secure configuration and operations.
