How can Bob changeJohn’s password?
This statement is false. Only Michael can change the password for John
This is possible if Michael can add Bob to a group which has permissions to modify the IAM passwords
It is not possible for John to modify his password
Provided Bob is the manager of John
Explanations:
The statement is false because Michael can administer IAM users, but it doesn’t mean only he can change John’s password. Other users with the correct permissions can also do this.
Michael can grant Bob permissions to modify IAM users’ passwords by adding him to a group that has the required permissions. Therefore, Bob can change John’s password if the necessary permissions are in place.
This is false because, even though John cannot modify his password, another user with the appropriate permissions (e.g., Bob) can change it for him.
The concept of “manager” is not directly tied to permissions in IAM. Bob’s ability to modify John’s password depends on the policies assigned to him, not on a managerial relationship.
To the best of my knowledge, the answer is:
This is possible if Michael can add Bob to a group which has permissions to modify the IAM passwords