S3 mfa_delete can only be enabled by the root account, which terraform will never be run as.
Attach a file by drag & drop or click to upload