After accidentally uploading a password for an IAM user in plain text, which of the following should a cloud administrator do FIRST?

A. Identify the resources that are accessible to the affected IAM user.
B. Remove the published plain-text password.
C. Notify users that a data breach has occurred.
D. Change the affected IAM user's password.
E. Delete the affected IAM user.