feature-request: support mfa_serial (consistency with aws cli)

if a profile in ~/.aws/config includes mfa_serial option, then aws cli reads it and asks for MFA code:

Enter MFA code for arn:aws:iam::665544332211:mfa/myusername:

where as cdk simply errors out:

The security token included in the request is expired

for the time being, I use a hacky solution where i first use AWS CLI with a sample command like aws ec2 describe-availability-zones --profile my-profile which asks me for MFA token and then upon authentication, creates a file ~/.aws/cli/cache/xxxx.json from where I can extract the temp access key, secret and session token and set them as environment variables for terminal. then, AWS CDK utilises those values and works as expected.

Can mfa support please be added to cdk also please?

[solcyr]

+1 for this feature. This could be very useful to practice CDK in my organization.

[abbottdev]

Our org only allows for accounts with MFA enabled using IAM. The workaround is ugly and not very accessible unless you’re an advanced user… The CDK (IMO) makes cloudformation more accessible, which is kind of the opposite of this workaround 😄 Hopefully this gets prioritised soon!