AWS IAM password policy does not have a lowercase character misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_11
Category - Subcategory	IAM - Authentication Policies
Provider	AWS
Severity	LOW
Framework	Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	ef7c537b-72eb-42a7-bab7-cb2d22c76a0d

Impact

Password policies are used to enforce the creation and use of password complexity. Your IAM password policy should be set for passwords to require the inclusion of different character types. The password policy should enforce passwords contain at least one lowercase letter, this increases security, especially from a brute force attack.

How to Fix

[source,go]

resource "aws_iam_account_password_policy" "strict" { ...

• require_lowercase_characters = true }

---