- 最新
- 最多得票
- 最多評論
When you create an IAM user there is a checkbox for User must create a new password at next sign-in
which does what you want. As an administrator you can enforce that for the next login for existing users as well.
If you're operating in a multi-account environment or are using AWS Organizations then I'd strongly recommend using IAM Identity Center which gives you the ability to use a central identity provider. Then you can control password policies and other authentication requirements (such as MFA) centrally.
When creating a User through the Console, you can specify that they need to change their password when they first log in:
If you are creating or updating your Users via the API/CLI, you call the CreateLoginProfile or UpdateLoginProfile APIs, which both support configuring the User to need to change their password when they first/next log in.
If you are using the CLI, the update command could look like this, for example:
aws iam update-login-profile --user-name james --password-reset-required
相關內容
- AWS 官方已更新 1 年前
- AWS 官方已更新 9 個月前
- AWS 官方已更新 2 年前
- AWS 官方已更新 2 年前