Can you use a physical security key for MFA when authenticating AWS CLI through the OP extension

bradical

Hi, I've got this setup https://developer.1password.com/docs/cli/shell-plugins/aws/ but am trying to figure out what I need to do if I use a Yubikey for MFA. I tried entering the ARN for the Yubikey but it doesn't seem to work. Anyone know if it has to be a virtual MFA with the code in the 1P entry for this to work?

---

1Password Version: 8.10.4
Extension Version: Not Provided
OS Version: macOS 13.2
Browser:_ Not Provided
Referrer: forum-search:aws cli with security key

bradical

Ah perhaps same as https://1password.community/discussion/139756/aws-cli-plugin-is-not-supporting-external-otp-anymore#latest

andi.t_1P

Hi @bradical ! I have started a discussion in the other thread that you found as the problems indeed seem to match: https://1password.community/discussion/139756/aws-cli-plugin-is-not-supporting-external-otp-anymore#latest. Let's move this over there!