A company is undergoing a security audit. The company issues IAM user credentials for an auditor. Because of third-party integration requirements, the auditor is unable to assume an IAM role. The auditor attempts to log in to AWS for the first time to reset the account password and to configure multi-factor authentication (MFA). However, the auditor receives an “Access Denied” error during the attempt to reset the password.
The auditor’s account has the following IAM permissions:
securityhub:Get*
securityhub:List*
securityhub:BatchGet*
securityhub:Describe*
iam:ChangePassword on arn:aws:iam::*:user/${aws:username}
Which action will resolve this error?
Submit