AWS Certified SysOps Administrator SOA-C01 – Question498

Bob is an IAM user who has access to the EC2 services. Admin is an IAM user who has access to all the AWS services including IAM. Can Bob change his own password?

A. No, the IAM user can never change the password
B. Yes, only from AWS CLI
C. Yes, only from the AWS console
D. Yes, provided Admin has given Bob access to change his own password

Correct Answer: D

Explanation:

Explanation: The IAM users by default cannot change their password. The root owner or IAM administrator needs to set the policy in the password policy page, which should allow the user to change their password. Once it is enabled, the IAM user can always change their own passwords from the AWS console or CLI.
Reference:
http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingUserP…