AWS Certified Solutions Architect - Professional (#211)

In AWS IAM, which of the following predefined policy condition keys checks how long ago (in seconds) the MFA-validated security credentials making the request were issued using multi- factor authentication (MFA)?

aws:MultiFactorAuthAge
aws:MultiFactorAuthLast
aws:MFAAge
aws:MultiFactorAuthPrevious