If you enabled Versioning with MFA Delete on your S3 bucket, you require multi-factor authentication on permanent deletions of your versions. For this you need a valid six-digit code and serial number from an authentication device. Thus MFA delete provides protection on your preserved versions.