AWS does not charge any additional fees for using AWS MFA with your AWS account. However, if you want to use a physical MFA device then you will need to purchase the MFA device that is compatible with AWS MFA either from Thales or Yubico, third party providers. For more details, please visit Yubico or Thales' website.