Ensure AWS IAM password policy has an uppercase character
Error: AWS IAM password policy does not have an uppercase character
Bridgecrew Policy ID: BC_AWS_IAM_5
Checkov Check ID: CKV_AWS_15
AWS IAM password policy does not have an uppercase character
Password policies are used to enforce the creation and use of password complexity. Your IAM password policy should be set for passwords to require the inclusion of different character types. The password policy should enforce passwords contain at least one uppercase letter, this increases security, especially from a brute force attack.
Fix - Runtime
To change the password policy in the AWS Console you will need appropriate permissions to View Identity Access Management Account Settings.
To manually set the password policy with a minimum length, follow these steps:
- Log in to the AWS Management Console as an IAM user at https://console.aws.amazon.com/iam/.
- Navigate to IAM Services.
- On the Left Pane click Account Settings.
- Select Requires at least one uppercase letter.
- Click Apply password policy.
To change the password policy, use the following command:
aws iam update-account-password-policy --require-uppercase-characters
Fix - Buildtime
All commands starting with aws iam update-account-password-policy can be combined into a single command.
Updated 4 months ago