https://myaccount.google.com/signinoptions/twosv, after I log in, I see the following:

When I click "Authenticator", I see

When I click "Set up authenticator", I see

and when I click "Can't scan it?", I see

This isn't going to work, is it?

AWS appears to support "Other hardware MFA device"s:

Then it prompts me thus:

At first I thought this looks great. I entered "youstupid" for the serial number, ran the application using echo youstupid | ./totp twice and entered the two generated tokens, then I get

I tried with many more serial numbers, but none of them have worked. Any ideas how to get this working on AWS? Is AWS expecting an Amazon-issued hardware device?

Oh yes, I should add that it doesn't seem to matter what generated keys I put in; it's not validating the keys. The serial number fails validation, then I can put in any keys I want and I get the same failure.