FelipeThadeu/iam-policy-prd_force_MFA_activation

Use IAM custom policy to restrict the initial access, with authorization only to change the password and activate the MFA feature. Unless the user activates the MFA feature, the user cannot access any other AWS services.