An organization (Account ID 123412341234). has attached the below-mentioned IAM policy to a user. What does this policy statement entitle the user to perform?

Answer options:

A.The policy allows the IAM user to modify all IAM user’s credentials using the console, SDK, CLI, or APIs.
B.The policy will give an invalid resource error.
C.The policy allows the IAM user to modify all credentials using only the console.
D.The policy allows the user to modify the IAM user’s password, signing certificates and access keys only.

Answer – D
First, to give a user a certain set of policies, you need to mention the following line. The aws:username will apply to the AWS logged in user.
Resource": "arn:aws:iam::account-id-without-hyphens:user/${aws:username}
Next, the policies will give the permissions to modify the IAM user’s password, sign in certificates, and access keys. 
“iam:*LoginProfile”,
“iam:*AccessKey*”,
“iam:*SigningCertificate*”
For information on IAM security policies, please visit the link:
http://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html