[Cyberduck-trac] [Cyberduck] #10222: Support 2FA

Cyberduck trac at cyberduck.io
Mon Feb 12 10:02:21 UTC 2018


#10222: Support 2FA
------------------------+-------------------
    Reporter:  dkocher  |      Owner:
        Type:  feature  |     Status:  new
    Priority:  normal   |  Milestone:
   Component:  s3       |    Version:  6.3.4
    Severity:  normal   |   Keywords:
Architecture:           |   Platform:
------------------------+-------------------
 Amazon S3 supports 2FA for delete requests when the bucket has versioning
 enabled since some time – this is supported in Cyberduck and can be
 configured in the Info panel in File → Info (⌘-I) → S3.

 A newer option in AWS allows to enable 2FA for users managed in IAM for
 any API operation. This can be configured using a policy that has a
 `aws:MultiFactorAuthPresent` option as
 [https://docs.aws.amazon.com/IAM/latest/UserGuide
 /id_credentials_mfa_configure-api-require.html documented]. This feature
 is not fully supported in Cyberduck – you will get a permission failure
 trying to access the bucket – as it requires to obtain temporary access
 tokens.

 Obtaining temporary credentials is only supported when you run Cyberduck
 on EC2. Refer to [Connecting with temporary access credentials (Token)
 from EC2. Refer to
 [https://trac.cyberduck.io/wiki/help/en/howto/s3#ConnectingwithtemporaryaccesscredentialsTokenfromEC2
 Connecting with temporary access credentials (Token) from EC2] – that is
 probably not what you are looking for.

--
Ticket URL: <https://trac.cyberduck.io/ticket/10222>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows


More information about the Cyberduck-trac mailing list