How to use the AWS CLI to collect Cost Explorer Forecasting data per account for all accounts in an AWS Organization

Why do I get an error "The snapshot is currently in use by AMI" when I try to delete an EBS snapshot, even though there is no AMI on the account?

How do I change the name on my AWS account?

How do I use a cross-account to invoke Amazon Bedrock in my account?

How can I migrate my Amazon DynamoDB tables from one AWS account to another?

What do I do if I receive an error when completing the one-time passcode to sign in to my AWS account?

# The scenario:

- Both my Amazon consumer account (the one I use when I log in to amazon.com to buy stuff) and my AWS root account use the same email address.
- 2FA can be enabled on both the Amazon consumer account and the AWS root account independently.

## When 2FA is enabled on both amazon.com and AWS, this is the behavior:
- Logging into amazon.com requires the TOTP configured for the MFA device connected to the Amazon consumer account. This is expected.
- Logging into the AWS console with the root account requires **both** the TOTP from the MFA device connected to the Amazon consumer account, **and** the TOTP from the MFA device connected to the AWS root account. Each TOTP is asked for one after the other, with different web pages. Only when both are entered can you proceed to the console. This is unexpected.

## When 2FA is enabled on *only* the AWS root account, this is the behavior:
- Logging into the AWS console with the root account requires only the TOTP from the MFA device connected to the AWS root account. This is expected.
- Logging into the Amazon consumer account requires the TOTP from the MFA device connected to the AWS root account. This is unexpected.

----
How do I set up 2FA on both accounts and have them be independent of the other account? This behavior is bizarre.

How do you make 2FA work on both an AWS account and an Amazon consumer account?

AWS Well-Architected Framework

Control Tower for both commercial and govcloud accounts

How can I connect and consume a Kinesis data stream from a different AWS account in your AWS account Firehose, which then processes the data and stores it in S3,

DataZone: consuming data in associated account fails

How can I connect my SAP RISE account to an existing AWS account?

How do you make 2FA work on both an AWS account and an Amazon consumer account?

The scenario:

When 2FA is enabled on both amazon.com and AWS, this is the behavior:

When 2FA is enabled on only the AWS root account, this is the behavior:

Relevant content