AWS Successful Console Login Without MFA

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•1•0•2

Detects successful AWS console logins that were performed without Multi-Factor Authentication (MFA). This alert can be used to identify potential unauthorized access attempts, as logging in without MFA can indicate compromised credentials or misconfigured security settings.