An organization has created 50 IAM users. The organization wants that each user can change their password but cannot change their access keys. How can the organization achieve this?
A.
The organization has to create a special password policy and attach it to each user
B.
The root account owner has to use CLI which forces each IAM user to change their password on first login
C.
By default each IAM user can modify their passwords
D.
The root account owner can set the policy from the IAM console under the password policy screen
Suggested Answer:D🗳️
With AWS IAM, organizations can use the AWS Management Console to display, create, change or delete a password policy. As a part of managing the password policy, the user can enable all users to manage their own passwords. If the user has selected the option which allows the IAM users to modify their password, he does not need to set a separate policy for the users. This option in the AWS console allows changing only the password.
If the organization wants to prevent IAM users from changing their access keys while still allowing them to change their passwords, the root account owner (or an IAM administrator with the appropriate permissions) can apply an IAM policy to the IAM users that restricts their ability to manage their own access keys.
The IAM password policy does not apply to the AWSaccount root user password or IAM user access keys. If a password expires, the IAM user can't sign in to the AWSManagement Console but can continue to use their access keys. -- https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_account-policy.html
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
awscertified
Highly Voted 2 years, 7 months agoalbert_kuo
Most Recent 9 months agoablazleon
2 years, 1 month agohou0220
2 years, 5 months agoRicardoD
2 years, 6 months agofagas
2 years, 7 months ago