Difference between revisions of "Iam:ChangePassword (Policy)"

From wikieduonline
Jump to navigation Jump to search
 
(7 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
{{lowercase}}
 
{{lowercase}}
<code>Either user is not authorized to perform iam:ChangePassword or entered password does not comply with account password [[policy]] set by administrator</code>
+
<code>[[iam]]:ChangePassword</code>
  
*Solution: remove [[MFA]] https://serverfault.com/questions/992027/aws-iam-wont-let-my-users-change-their-passwords
+
== Errors ==
 +
* <code>Either user is not authorized to perform iam:ChangePassword or entered password does not comply with account password [[policy]] set by administrator</code>
  
 +
Solution:
 +
* Remove [[MFA policy]] https://serverfault.com/questions/992027/aws-iam-wont-let-my-users-change-their-passwords
  
*<code>[[iam]]:ChangePassword</code>
+
 
 +
  An error occurred ([[AccessDenied]]) when calling the [[ChangePassword]] operation: User: arn:aws:iam::146910341356:user/MY_USERNAME [[is not authorized to perform]]: [[iam:ChangePassword]] on resource: user MY_USERNAME [[with an explicit deny]]
  
 
==Examples==
 
==Examples==
Line 26: Line 30:
 
== Related ==
 
== Related ==
 
* <code>[[aws iam change-password]]</code>
 
* <code>[[aws iam change-password]]</code>
 +
* <code>[[iam:GetAccountPasswordPolicy]]</code>
 +
* <code>[[IAMUserChangePassword]]</code>
  
 
== See also ==
 
== See also ==

Latest revision as of 18:35, 11 September 2023

iam:ChangePassword

Errors[edit]

  • Either user is not authorized to perform iam:ChangePassword or entered password does not comply with account password policy set by administrator

Solution:


 An error occurred (AccessDenied) when calling the ChangePassword operation: User: arn:aws:iam::146910341356:user/MY_USERNAME is not authorized to perform: iam:ChangePassword on resource: user MY_USERNAME with an explicit deny

Examples[edit]

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "iam:GetAccountPasswordPolicy",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "iam:ChangePassword",
      "Resource": "arn:aws:iam::account-id-without-hyphens:user/${aws:username}"
    }
  ]
}

Related[edit]

See also[edit]

Advertising: