A: Overall password policy for the entire AWS account - affects new users immediately, but not old users immediately. Next time the old users change their passwords, the new rule will apply then.
B: Logically wrong. If you already have a user, then that user must've already have a password. So when you individually set a password policy for these users, they are only affected next time they change their passwords, just like I mentioned above about option A. Plus, this is really tiresome because this is user-wise, and there might be too many users, and the work you must do manually is increasing horribly.
You can set a custom password policy on your AWS account to specify complexity requirements and mandatory rotation periods for your IAM users' passwords. When you create or change a password policy, most of the password policy settings are enforced the next time your users change their passwords. However, some of the settings are enforced immediately.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_account-policy.html#:~:text=Setting%20an%20account-,password%20policy,-for%20IAM%20users
To accomplish this, the solutions architect should set an overall password policy for the entire AWS account. This policy will apply to all IAM users in the account, including new users.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
lostmagnet001
Highly Voted 10 months, 2 weeks agoangel_marquina
Highly Voted 1 year, 3 months agoLeonSauveterre
Most Recent 3 weeks, 2 days ago[Removed]
6 months, 3 weeks ago[Removed]
6 months, 3 weeks agoTariqKipkemei
1 year, 2 months agoklayytech
1 year, 9 months agoWherecanIstart
1 year, 9 months agokampatra
1 year, 9 months ago[Removed]
1 year, 9 months ago