Poisoned Pipeline / Mitigations / M1530

M1530

Use multi-factor authentication

Implement multi-factor authentication (MFA) for all users, including developers, to reduce the risk of unauthorized access to their workstations and other resources.

Applies to

• T0153 Compromised developer workstation
• T0208 Compromise code-signing identity
• T0176 Disable or misconfigure security measures

References

• https://aws.amazon.com/what-is/mfa/