This seems incredibly clunky and most people are probably not doing something that involves typing the ARN of their MFA device on a day to day basis. To be tenable on a daily basis you need something like “aws login” with username, password, and code that sets up your credentials file correctly. Expect people to copy and paste values around, and you’ve already lost.

Not to mention legacy code that only knows about access key ID and secret, and doesn’t have a place to even put a token.

https://aws.amazon.com/premiumsupport/knowledge-center/authe...