A company is implementing a new policy to enhance the security of its AWS environment.

Enable MFA on the root account. Ensure that all administrators use the root account to perform administrative actions.

Create an IAM policy that requires MFA to be enabled for the IAM roles that administrators assume to perform administrative actions.

Configure an Amazon CloudWatch alarm that sends an email notification when an administrator performs an administrative action without MFA.

Use AWS Config to periodically audit IAM users and to automatically attach an IAM policy that requires MFA when AWS Config detects administrative actions.