create an AWS account for clause

[mengwong]

obtain finance-circle authorization for up to $100 per month to run one or more micro instances for the production website & web app.

create user accounts under IAM: one for jobchong, one for mengwong. enable 2fa using virtual MFA, basically Google Authenticator on the phone. do this together with jobchong and with mengwong so they can confirm they can get into the console.

ship one hardware key fob MFA device to jobchong

ship one hardware key fob MFA device to meng

https://aws.amazon.com/iam/details/mfa/

when the hardware devices arrive, mengwong and jobchong to add them so both hardware and virtual methods work.