title: How do I enable VirtualMFADevice in CloudFormation?
body: <p>I have a CloudFormation script that creates new users (with roles, policies etc).</p>
  <p>I am hoping to ensure the new users have MFA enabled. The <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-virtualmfadevice.html" rel="nofollow noreferrer">docs</a> mention you have to &quot;attach the MFA device to an IAM user after creating the MFA&quot; (even though there is a <code>Users</code> property as below?) but they only point to how to do this in the console and CLI.</p>
  <pre><code>  Type: AWS::IAM::VirtualMFADevice
      Properties:
        Users:
            - !Ref user1
            - !Ref user2
        VirtualMfaDeviceName: Something
  </code></pre>
  <p>Is this operation not supported in CloudFormation maybe?</p>