[Feature Request] Extend Credentials processing for MTurk to support MFA

[dkaushik96]

My AWS account needs multi factor authentication and if I register my AWS IAM user through Mephisto to run MTurk tasks, then it does not recognize the permissions as the aws_session_code is missing.

AWS CLI allows me to get a session code:
aws sts get-session-token --serial-number arn:aws:iam:: --token-code <mfa_code>

and then export it to aws/credentials file but then there is a mismatch between that session code and Mephisto's requests. Can we add this feature?

[JackUrb]

Hi @dkaushik96 - this isn't something I have experience with. Do you have any visibility on what causes the "mismatch between that session code and Mephisto's requests." and if there's a clear way to incorporate an aws_session_code into a botocore-based session?

Would be happy to scope or add this functionality once I get a better idea what needs to be done.

[dkaushik96]

Hey, sorry missed this. Here's a doc AWS provides: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_sample-code.html