AWS Security Agent now supports email-based MFA for penetration testing

AWS Security Agent now supports email-based MFA for penetration testing, expanding coverage for applications using email verification as part of their login flow.

• Generates unique forwarding addresses per credential to route MFA emails to the agent
• Automatically reads forwarded messages and submits codes or links to complete authentication
• No email account credentials stored, maintaining strong privacy posture
• Complements existing TOTP support for unified multi-method MFA testing
• Available in all AWS Regions where AWS Security Agent is supported

This feature enables penetration testers to comprehensively test applications previously out of scope due to email-based authentication requirements.