任意のPathを付与したIAM UserがIAMUserChangePasswordだけで自分のパスワードが変更できるかのテスト

iam.yml

AWSTemplateFormatVersion: "2010-09-09"
Metadata:
    Generator: "console"
Description: ""
Resources:
    UserWithDeepPath:
        Type: "AWS::IAM::User"
        Properties:
            UserName: "test-w-deep-path"
            Path: "/hoge/fuga/"
            LoginProfile:
                Password: "Password!"
                PasswordResetRequired: true

    UserWithSinglePath:
        Type: "AWS::IAM::User"
        Properties:
            UserName: "test-w-single-path"
            Path: "/hoge/"
            LoginProfile:
                Password: "Password!"
                PasswordResetRequired: true

    GroupTestStaff:
        Type: "AWS::IAM::Group"
        Properties:
            GroupName: "test-staff"
            ManagedPolicyArns: [
                "arn:aws:iam::aws:policy/IAMUserChangePassword"
            ]

    UserToGroupAdditionTestStaff:
        Type: 'AWS::IAM::UserToGroupAddition'
        Properties:
            GroupName: !Ref GroupTestStaff
            Users:
                - !Ref UserWithDeepPath
                - !Ref UserWithSinglePath