AWS_IAM_9
Password policies are, in part, used to enforce password complexity requirements. IAM password policies can be used to ensure password are at least a given length. It is recommended that the password policy require a minimum password length 14.
Perform the following to ensure the password policy is configured as prescribed:
Via AWS Console
Via CLI
aws iam update-account-password-policy –minimum-password-length 14
Note: All commands starting with “aws iam update-account-password-policy” can be
combined into a single command.
References:
1. CCE-78907-3
2. CIS CSC v6.0 #5.7, #16.12
Want to Know More?
Learn how our partners are managing their cloud security and compliance with Cloudlytics.
I hereby accept the GDPR and Privacy Policy, by subscribing to the newsletters.
