'alert when an IAM user has a login profile and no MFA devices.
This means a human account which could be better protected with 2FA.'

def check_no_mfa(self, iamuser_item):

    user_mfas = iamuser_item.config.get('MfaDevices', {})
    login_profile = iamuser_item.config.get('LoginProfile', {})
    if (login_profile and (not user_mfas)):
        self.add_issue(1, 'User    with    password    login    and    no    MFA    devices.', iamuser_item)
