AWS identity and access management (IAM)

You want to manage access to AWS services and resources securely with fine-grained access control, integration with your corporate directory, and enforcing multi-factor authentication (MFA) for highly privileged users. Adding MFA for your AWS IAM and root users is an AWS IAM best practice.

Get setup instructions

Simplify the sign-in experience

The YubiKey delivers one touch multi-factor authentication (MFA) simplifying the sign-in experience for your AWS accounts.

Enhance sign-in
security

Using the YubiKey allows you to sign-in to the AWS Management Console securely by adding protection against phishing and other threats.

Use YubiKey across multiple AWS accounts

AWS and YubiKey bridge convenience with the ability to use the same YubiKey for multiple IAM and root users across multiple AWS accounts.

AWS works with:

Buy YubiKeys

Already own a YubiKey? See compatible legacy YubiKeys.

YubiKey 5Ci (USB-C)

YubiKey 5C NFC

YubiKey 5 NFC

YubiKey 5C

YubiKey 5 Nano

YubiKey 5C Nano

Security Key

Security Key NFC

Yubico-verified listing

This product integration has been vetted and verified by the Yubico team. This company may or may not partner with Yubico to jointly solve customer needs.

Learn more

System requirements

See AWS for more information

Instructions

Compatible legacy YubiKeys

YubiKey 4
YubiKey 4 Nano
YubiKey 4C
YubiKey 4C Nano
YubiKey NEO
FIDO U2F Security Key

Product overview

AWS Identity and Access Management (IAM) enables you to manage access to AWS services and resources securely. AWS IAM and root users can use their YubiKey as a multi-factor authentication (MFA) device to add an extra layer of protection on top of their user name and password. YubiKey allows customers to use the same key as the MFA device for multiple IAM and root users across AWS accounts. They can also use their YubiKey with applications that support U2F.