IAM policy age with MFA

IAM-policy-age-with-MFA.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
	  "Effect": "Allow",
	  "Action": "ec2:*",
	  "Resource": "*"
	},
	{
	  "Effect": "Deny",
	  "Action": ["ec2:StopInstances", "ec2:TerminateInstances"],
	  "Resource": "*",
	  "Condition": {
	    "BoolIfExists": {
		  "aws:MultiFactorAuthPresent": false
		},
		"NumericLessThan": {
		  "aws:MultiFactorAuthAge": "300"
		}
		
	  }
	}
  ]
}