1 Answer
- Newest
- Most votes
- Most comments
1
Hi @AWS-User-1576695,
IAM User's password does not appear to be accessible via any API call and it is supplied as password_last_changed in the **Credentials Report **that can be downloaded from the AWS IAM management console.
aws iam list-users --query "Users[?UserName=="<user>"].PasswordLastUsed" should give the timestamp when the password was last changed
If the Answer is helpful, please click Mark as answered, this can be beneficial to other community members.
Relevant content
- asked 6 months ago
- asked 3 years ago
- AWS OFFICIALUpdated 3 years ago

Thank you.
PasswordLastUsed is not the same as password last changed according to the docs.
PasswordLastUsed -> (timestamp) The date and time, in ISO 8601 date-time format , when the user’s password was last used to sign in to an Amazon Web Services website...
https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iam/list-users.html#output