- 최신
- 최다 투표
- 가장 많은 댓글
When you create an IAM user there is a checkbox for User must create a new password at next sign-in
which does what you want. As an administrator you can enforce that for the next login for existing users as well.
If you're operating in a multi-account environment or are using AWS Organizations then I'd strongly recommend using IAM Identity Center which gives you the ability to use a central identity provider. Then you can control password policies and other authentication requirements (such as MFA) centrally.
When creating a User through the Console, you can specify that they need to change their password when they first log in:
If you are creating or updating your Users via the API/CLI, you call the CreateLoginProfile or UpdateLoginProfile APIs, which both support configuring the User to need to change their password when they first/next log in.
If you are using the CLI, the update command could look like this, for example:
aws iam update-login-profile --user-name james --password-reset-required
관련 콘텐츠
- AWS 공식업데이트됨 2년 전