Enabling MFA delete on S3 Bucket from CloudFormation template

Question

I know that the MFA delete on S3 Bucket can be enabled using AWS CLI or SDK, like it shown in this example.

But in case of CloudFormation template, if I want to enable MFA delete, I will have to invoke lambda with this code.

Is it possible somehow to enable the MFA delete for S3 Bucket directly from the CloudFormation template without invoking the specific lambda?

I think no way too but you can take a look at CF Custom Resource Lambda — Bui Anh Tuan
Dear, have you read the question? I've mentioned that I know how to do that via lambda — Andremoniy

hlmartin hlmartin · Accepted Answer · 2017-10-12T08:34:02

I don't believe so. The current CloudFormation documentation on the S3 Bucket VersioningConfiguration resource only provides for the Status property, whereas the API documentation for PUT Bucket versioning specifies the MfaDelete property.