Query: iam_user_mfa_for_user

select
  case when mfa_enabled then 'Enabled' else 'Disabled' end as value,
  'MFA Status' as label,
  case when mfa_enabled then 'ok' else 'alert' end as type
from
  aws_iam_user
where
  arn = $1
  and account_id = split_part($1, ':', 5);