fix: Allow Change Password when no MFA present (#340)

terraform-aws-modules · Feb 15, 2023 · 0c1cfaa · 0c1cfaa
1 parent f82f3e2
commit 0c1cfaa
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/modules/iam-group-with-policies/policies.tf b/modules/iam-group-with-policies/policies.tf
@@ -134,6 +134,7 @@ data "aws_iam_policy_document" "iam_self_management" {
     effect = "Deny"
 
     not_actions = [
+      "iam:ChangePassword",
       "iam:CreateVirtualMFADevice",
       "iam:EnableMFADevice",
       "iam:GetUser",