AWS IAM password policy does not have a symbol misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_14
Category - Subcategory	IAM - Authentication Policies
Provider	AWS
Severity	LOW
Framework	Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	fd4dae57-509e-4374-96d3-e136821fc3f3

Impact

Password policies are used to enforce the creation and use of password complexity. Your IAM password policy should be set for passwords to require the inclusion of different character types. The password policy should enforce passwords contain at least one symbol, this increases security, especially from a brute force attack.

How to Fix

[source,go]

resource "aws_iam_account_password_policy" "strict" { ...

• require_symbols = true }

---