def _is_mfa_admin_creds(section):
    """
    Filter for ~/.aws/credentials profile section names.
    """
    
    if not section.startswith('admin-'):
        return False
    if section.endswith('-long-term') or section.endswith('-root'):
        return False
    return True