A user has been granted permission to change their own IAM user password. Which AWS services can the user use to change the password? (Choose two.)

Question

Options

• AAWS Command Line Interface (AWS CLI)
• BAWS Key Management Sen/ice (AWS KMS)
• CAWS Management Console
• DAWS Resource Access Manager (AWS RAM)
• EAWS Secrets Manager

• A
  90% (37)
• B
  5% (2)
• D
  2% (1)
• E
  2% (1)

Explanation

Explanation

When a user has been granted the IAM permission to change their own password, they can do so through the AWS Management Console (via the "My Security Credentials" page) or through the AWS CLI using the aws iam change-password command - both are direct interfaces for managing IAM credentials.

Why the distractors are wrong:

• AWS KMS (B) is a key management service for creating and controlling encryption keys - it has no role in managing IAM user passwords.
• AWS RAM (D) is used for sharing AWS resources across accounts - it has nothing to do with password management.
• AWS Secrets Manager (E) is designed to store and rotate secrets like database credentials, but it does not manage IAM user login passwords directly.

Memory Tip: Think of it this way - to change your IAM password, you need a direct interface to IAM, which means either clicking through the Console or typing commands through the CLI. Any other service (KMS, RAM, Secrets Manager) serves a completely different purpose and acts as a distractor playing on the word "password" or "security."

No community discussion yet for this question.