Ah, amazon AWS. The greatest cloud platform there is for developers. Except the UI can painfully un-intuitive at times.
Take for example an error I got when I tried to change my console password the other day on a client account I rarely use. So I enter my account alias, lookup and enter my old password out of my account manager and I get presented with a change password screen since its been so long. No problem, I generate a new password which I dutifully enter only to get this error:
Either user is not authorized to perform iam:ChangePassword or entered password does not comply with account password policy set by administrator
Ok so either my account does not have the authorization to change my own password, which by the way is the most idiotic security setting there can be to not allow a user to update their own password...but whatever. Or my new password does not meet the password rules.
Except nowhere during this change password workflow it is possible to see what that policy is, I have to guess.
And this is not a new issue. Here is an article from 2017 complaining about the exact same issue "User is not authorized to perform iam:ChangePassword". So come on amazon, you know you can do better.