AWS adds 2FA support with YubiKeys: https://aws.amazon.com/blogs/security/use-yubikey-security-key-sign-into-aws-management-console/