add iam:ChangePassword to Not Deny which means to Allow

stelligent · Apr 10, 2019 · 217fcc5 · 217fcc5
1 parent 7af7cd8
commit 217fcc5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/infrastructure/iam/StelligentConfigureOwnMFAPolicy.json b/infrastructure/iam/StelligentConfigureOwnMFAPolicy.json
@@ -71,7 +71,8 @@
                 "iam:ListServiceSpecificCredentials",
                 "iam:ListMFADevices",
                 "iam:GetAccountSummary",
-                "sts:GetSessionToken"
+                "sts:GetSessionToken",
+                "iam:ChangePassword"
             ],
             "Resource": "*",
             "Condition": {