Need help disabling MFA Delete on S3 bucket: How can I resolve this issue?

Question

I'm encountering difficulties while trying to disable MFA Delete on my S3 bucket in AWS . Despite following various guides and attempting different CLI commands, I keep encountering errors that prevent me from completing the task successfully so I can empty and delete my bucket definitely.

**Main Issue:**
The primary issue appears to be the unexpected error message indicating that "DevPay and Mfa are mutually exclusive authorization methods," even though I haven't activated DevPay and don't know how to get rid of that.

**Steps Taken:**
I've tried adjusting IAM (Identity and Access Management) policies and roles, including removing MFA requirements.
I've attempted different CLI commands, including those provided in AWS documentation and community forums.
I've ensured that my IAM user has appropriate permissions to modify S3 bucket settings.

**Additional Notes:**
The bucket has Object Lock enabled, which might affect certain operations. Is there a way to suspend Object Lock temporarily to resolve this issue?
I'm seeking assistance in resolving this issue and would appreciate any insights or suggestions from the community.

Accepted Answer

Hello.

I think you need to be the root user of the AWS account to perform operations such as MFA deletion of the S3 bucket.  
Therefore, please sign in to your AWS account as the root user by following the steps in the document below.  
https://docs.aws.amazon.com/signin/latest/userguide/introduction-to-root-user-sign-in-tutorial.html

After signing in as a root user, try running the following AWS CLI command.  
I think you can disable it by specifying "MFADelete=Disabled" as a command option.  
https://awscli.amazonaws.com/v2/documentation/api/latest/reference/s3api/put-bucket-versioning.html  
```
aws s3api put-bucket-versioning --bucket DOC-EXAMPLE-BUCKET1 --versioning-configuration Status=Enabled,MFADelete=Disabled --mfa "SERIAL 123456"
```

Answer

Have you tried disabling MFA Delete using the root account? I think that's required.

Need help disabling MFA Delete on S3 bucket: How can I resolve this issue?

Relevant content