title: DevPay and Mfa are mutually exclusive authorization methods
body: <p>I'm trying to add MFA-deletion to my S3 bucket with the AWS-cli with the following command: </p>
  
  <pre><code>aws s3api put-bucket-versioning --bucket &lt;my-bucket-name&gt; --versioning-configuration '{"MFADelete":"Enabled","Status":"Enabled"}' --mfa 'arn:aws:iam::&lt;code-found-at-iam-page&gt;:mfa/root-account-mfa-device &lt;my-google-authenticator-code&gt;'
  </code></pre>
  
  <p>but the response I get is this:</p>
  
  <blockquote>
    <p>An error occurred (InvalidRequest) when calling the
    PutBucketVersioning operation: DevPay and Mfa are mutually exclusive
    authorization methods.</p>
  </blockquote>
  
  <p>which makes no sense as I have never used DevPay. My security group for the instance has S3FullAccess enabled so that shouldn't be a problem either.</p>
  
  <p>Any suggestions on what the problem might be would be appreciated.</p>