Poisoned Pipeline / Mitigations / M1311

M1311

Implement multi-factor authentication

Require multi-factor authentication (MFA) for user accounts, especially for privileged accounts.
MFA adds an additional layer of security and can help prevent unauthorized access to user accounts, reducing the risk of overprivileged accounts being compromised.

Applies to

• T0165 Create access token
• T0131 Overprivileged user account

References

• https://aws.amazon.com/what-is/mfa/