aws_mfa.py

import os
import getpass
import boto3

os.environ['AWS_ACCESS_KEY_ID'] = ...     # your accounts access key
os.environ['AWS_SECRET_ACCESS_KEY'] = ... # your accounts secret

client = boto3.client("sts")
token = getpass.getpass("Enter MFA token -> ")
# Exchange permanent key/secret for temporary ones
response = client.get_session_token(
    SerialNumber="arn:aws:iam::XXX:mfa/XXX",  # your accounts ARN
    TokenCode=token,
)

# response contains temporary access key and secret and session token
os.environ.update({
    "AWS_ACCESS_KEY_ID": response["Credentials"]["AccessKeyId"],
    "AWS_SECRET_ACCESS_KEY": response["Credentials"]["SecretAccessKey"],
    "AWS_SECURITY_TOKEN": response["Credentials"]["SessionToken"],
})

# exec some CLI command with the above environment
os.execlp(command, command)