The Wayback Machine - https://web.archive.org/web/20210923132951/https://docs.aws.amazon.com/config/latest/developerguide/root-account-hardware-mfa-enabled.html
root-account-hardware-mfa-enabled - AWS Config
AWS CloudFormation template

root-account-hardware-mfa-enabled

Checks if your AWS account is enabled to use multi-factor authentication (MFA) hardware device to sign in with root credentials. The rule is NON_COMPLIANT if any virtual MFA devices are permitted for signing in with root credentials.

Identifier: ROOT_ACCOUNT_HARDWARE_MFA_ENABLED

Trigger type: Periodic

AWS Region: All supported AWS regions except China (Beijing), China (Ningxia), AWS GovCloud (US-East), AWS GovCloud (US-West) Region

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.