Review.

Co-authored-by: Copilot <[email protected]>

Author: dkocher

tutorials/s3_iam_role_mfa.md

@@ -14,7 +14,7 @@ Configure a user in AWS IAM that is required to use MFA to connect to S3
     aws_secret_access_key=…
     ```
 
-3. Assign a MFA device to the user in _Multi-factor authentication (MFA)_. Copy the MFA ARN to the `<S3-ROLE-NAME>` profile in `~/.aws/credentials`.
+3. Assign a MFA device to the user in _Multi-factor authentication (MFA)_. Reference the MFA ARN as the value for the `mfa_serial` parameter in the `<S3-ROLE-NAME>` profile in `~/.aws/credentials`.
 
     :::{tip}
     To allow entering the code in Cyberduck or Mountain Duck when connecting, make sure to choose _Authenticator app_ or _Hardware TOTP token_ as a MFA device. Using Passkey MFA does not allow getting a numeric MFA code.