How to allow IAM users to setup their own virtual MFA devices
- by Ali
I want to let my IAM users to setup their own MFA devices, through the console, is there a single policy that I can use to achieve this?
So far I can achieve this through a number of IAM policies, letting them list all mfa devices and list users (so that they can find themselves in the IAM console and ...
I am basically looking for a more straight forward way of controlling this.
I should add that my IAM users are trusted users, so I don't have to (although it will be quite nice) lock them down to the minimum possible, so if they can see a list of all users that is ok.