AWS tips

gistfile1.md

permission for user password change

{
  "Effect": "Allow",
  "Action": ["iam:ChangePassword"],
  "Resource": ["__User_ARN_here__"]
},
{
  "Effect": "Allow",
  "Action": ["iam:GetAccountPasswordPolicy"],
  "Resource": ["*"]
}

source: http://docs.aws.amazon.com/IAM/latest/UserGuide/HowToPwdIAMUser.html

convert PEM private to OpenSSH public format

ssh-keygen -y -f foo.pem