allow new users to change their pw

ale210 · ale210 · commit e259e679c91a · 2025-10-15T19:09:04.000-07:00
diff --git a/terraform/aws-custom-policies/enforce-mfa-for-users-policy.json b/terraform/aws-custom-policies/enforce-mfa-for-users-policy.json
@@ -12,6 +12,8 @@
               "iam:ListMFADevices",
               "iam:ListVirtualMFADevices",
               "iam:ResyncMFADevice",
+              "iam:ChangePassword",
+              "iam:GetAccountPasswordPolicy",
               "sts:GetSessionToken"
           ],
           "Resource": "*",
