DEV Community

Taylor Brazelton
Taylor Brazelton

Posted on • Edited on

AWS Vault and MFA Setup on my Mac

#mfa #aws #vault

Recently, I decided to secure my local machine by downloading and using AWS Vault. To my surprise, setting up MFA with Vault required a step or two more that I wasn't expecting. Here are my findings/steps.

First, I used homebrew to install aws-vault.

brew cask install aws-vault
Enter fullscreen mode Exit fullscreen mode

Then I added my profile and followed the instructions which had me provide my Access ID and Secret.

aws-vault add taylor
Enter fullscreen mode Exit fullscreen mode

Then I tried to list out the S3 buckets via:

aws-vault exec taylor -- aws s3 ls
Enter fullscreen mode Exit fullscreen mode

This resulted in the following error.

An error occurred (AccessDenied) when calling the ListBuckets operation: Access Denied
Enter fullscreen mode Exit fullscreen mode

So I opened up my AWS config file in Visual Studio Code.

code ~/.aws/config
Enter fullscreen mode Exit fullscreen mode

Doing so lead me to see that my profile didn't have a mfa_serial variable defined. I found my key in IAM under my own user's Security Credentials tab and added it to the file.

Now, my config file had the following in it:

[profile taylor]
mfa_serial=arn:aws:iam::XXXXXXXXXX:mfa/taylor
Enter fullscreen mode Exit fullscreen mode

And when I performed my s3 listing again, it worked.

Top comments (0)

Read next

wallacefreitas profile image

How to Work with AWS Lambda Layers Using AWS CDK with TypeScript

Wallace Freitas -

mlewis7127 profile image

Amazon Q Developer Agent for Code Transformation

Matt Lewis -

ajcastillo profile image

C4 Model en la Nube: Implementación Práctica con AWS y Terraform

Antonio Jesús Castillo Cotán -

wakeupmh profile image

Haunted by EMFILE Issue and some ways to exorcize it

Marcos Henrique -