# List IAM users without MFA

**URL:** <https://community.cloudquery.io/t/list-iam-users-without-mfa/1214>\
**Category:** Queries & Insights\
**Tags:** aws, queries, security\
**Created:** [August 7, 2025, 10:04am UTC](https://community.cloudquery.io/t/list-iam-users-without-mfa/1214 "2025-08-07T10:04:34Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![pilvikala](https://sea1.discourse-cdn.com/flex001/user_avatar/community.cloudquery.io/pilvikala/32/11_2.png) [@pilvikala](https://community.cloudquery.io/u/pilvikala)\
**Post date:** [August 7, 2025, 10:04am UTC](https://community.cloudquery.io/t/list-iam-users-without-mfa/1214/1 "2025-08-07T10:04:34Z")

</div>

IAM users with access to your AWS infrastructure without the multi-factor authentication represent a significant security risk. If you need to audit and report on MFA adoption across all your AWS accounts, here’s a simple PostgreSQL query to do so:

```sql
SELECT user_name, arn, create_date, user_id, tags 
FROM aws_iam_users AS u 
WHERE u.user_name NOT IN 
  (SELECT user_name FROM aws_iam_mfa_devices)

```