fix: allow user to change password without MFA configured (#19)

ace-teknologi · Jan 8, 2024 · 551ea7b · 551ea7b
1 parent c7102f3
commit 551ea7b
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 0 deletions.
diff --git a/.gitignore b/.gitignore
@@ -4,3 +4,6 @@
 # .tfstate files
 *.tfstate
 *.tfstate.*
+
+# Lockfiles
+.terraform.lock.hcl
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # CHANGELOG
 
+## v0.1.3 (2024-01-08)
+
+### Fixed
+
+* Allow user to change password without MFA configured.
+
 ## v0.1.2 (2019-08-09)
 
 * Resolves inability to assume roles across accounts.

diff --git a/groups/main.tf b/groups/main.tf
@@ -254,11 +254,13 @@ data "aws_iam_policy_document" "self_management" {
  "iam:DeleteVirtualMFADevice",
  "iam:EnableMFADevice",
  "iam:GetAccountPasswordPolicy",
+ "iam:GetLoginProfile",
  "iam:GetUser",
  "iam:ListMFADevices",
  "iam:ListUsers",
  "iam:ListVirtualMFADevices",
  "iam:ResyncMFADevice",
+ "iam:UpdateLoginProfile",
  "sts:GetSessionToken",
  ]