when you deploy flows to S3 block, we only upload files, we never delete any objects there, so MFA shouldn't matter in this context; the block doesn't even have any method atm to delete any objects so it should be save for you to use with your MFA setup

btw great to see you using 2.0 - I remember we published posts about using 1.0 with ECS on the same day like 2 years ago or so 😄

I can access s3 via aws cli with a mfa token after changing the .credentials file but I think I need to change my .config too so botocore can access as well. Will report back.

@Anna Geller victorrryyyyyyy. Ok so if you have MFA requirements, you should not specify your S3 access key id and secret access key in the UI.