AWS IAM password policy does allow password reuse misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_13
Category - Subcategory	IAM - Authentication Policies
Provider	AWS
Severity	HIGH
Framework	Terraform, Terraform Plan

Impact

Password policies are used to enforce the creation and use of password complexity. Your IAM password policy must prevent reuse of passwords. Each password should be brand new to increase security, especially from a brute force attack.

How to Fix

[source,go]

resource "aws_iam_account_password_policy" "strict" { ...

• apassword_reuse_prevention = 24 }

---