Query: iam_users_by_mfa_enabled

with mfa_stat as (
  select
    case
      when mfa_enabled then 'enabled'
      else 'disabled'
    end as mfa_status
  from
    aws_iam_user
)
select
  mfa_status,
  count(*)
from
  mfa_stat
group by
  mfa_status;