Ensure IAM users have Hardware MFA enabled.