AWS IAM password policy does not have a minimum of 14 characters misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_10
Category - Subcategory	IAM - Authentication Policies
Provider	AWS
Severity	LOW
Framework	Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	168bfaa0-8c1d-427e-bfa8-4d96d82e3d83

Impact

Password policies are used to enforce the creation and use of password complexity. Your IAM password policy should be set for passwords to require the inclusion of different character types. The password policy should enforce passwords contain a minimum of 14 characters, this increases security, especially from a brute force attack.

How to Fix

[source,go]

resource "aws_iam_account_password_policy" "strict" { ...

• minimum_password_length = 14 }

---