AWS IAM password policy does not have a number misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_12
Category - Subcategory	IAM - Authentication Policies
Provider	AWS
Severity	LOW
Framework	Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	9a5813af-17a3-4058-be13-588ea00b4bfa

Impact

Password policies are used to enforce the creation and use of password complexity. Your IAM password policy should be set for passwords to require the inclusion of different character types. The password policy should enforce passwords contain at least one number, this increases security, especially from a brute force attack.

How to Fix

[source,go]

resource "aws_iam_account_password_policy" "strict" { ...

• require_numbers = true }

---