b2c-backend-aws-mfa

To refresh AWS MFA session tokens, you must validate the current session, input your MFA code, and obtain a new session token via STS. This Skill automates that process and writes the fresh temporary credentials into your local configuration.

Terraform fails when an AWS MFA session expires because MFA policies block operations with outdated temporary credentials. You need to obtain fresh session tokens via STS and update your credentials file to resume infrastructure automation without authentication interruptions.

Updating the default AWS credentials profile requires writing the newly obtained STS session token, access key, and secret key directly into the ~/.aws/credentials file. This ensures the default profile automatically uses the refreshed temporary credentials.

You can automate AWS CLI authentication by requesting a session token through STS after entering your MFA code. This process updates the default profile in your credentials file, allowing CLI and SDK operations to persist without manual token reentry.

If you enter an invalid MFA code during AWS session renewal, the STS request fails. This Skill provides error handling and recovery guidance, prompting you to correct the code and successfully regenerate the session token.

Yes, this MFA session refresh creates a base profile if one is needed. When updating the ~/.aws/credentials file, it ensures a valid default profile exists before writing the new STS session tokens for continuous authentication.