Previously unable to automate pentests for applications employing email-based MFA, AWS Security Agent (part of AWS Continuum) generates unique forwarding addresses per credential, routing MFA emails to the agent. It then reads one-time codes or links and submits them to complete authentication flows without storing email credentials, maintaining privacy.
This feature complements existing TOTP support and is available in all AWS Regions supporting the agent. It improves automated security testing scope for applications using varied MFA methods, though independent efficacy assessments are not reported.
Source & further reading
AWS Security Agent now supports email-based MFA for penetration testing ↗Source published 2026-08-06. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.