IAM user with console access has MFA enabled

# IAM user without console password
resource "aws_iam_user" "user" {
  name = "<example_resource_name>"
  # Critical: Do NOT create an aws_iam_user_login_profile resource.
  # Without a login profile, no console password is set, so the check passes.
}

# CloudFormation: IAM user without a console password
Resources:
  IamUser:
    Type: AWS::IAM::User
    Properties:
      UserName: <example_resource_name>
      # Critical: Do NOT include the LoginProfile property.
      # Omitting LoginProfile ensures no console password is set, making the check pass.