aws iam deactivate-mfa-device
Deactivates the specified MFA device and removes it from association with the user name for which it was originally enabled. AWS CLI reference
2 options Its page in the AWS CLI reference
Options
--serial-numberThe serial number that uniquely identifies the MFA device.--user-nameThe name of the user whose MFA device you want to deactivate.