AWS IAM password policy does not have an uppercase character misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_15
Category - Subcategory	IAM - Authentication Policies
Provider	AWS
Severity	LOW
Framework	Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	31626ca9-f659-4d25-9d88-fa32262bbba7

Impact

Password policies are used to enforce the creation and use of password complexity. Your IAM password policy should be set for passwords to require the inclusion of different character types. The password policy should enforce passwords contain at least one uppercase letter, this increases security, especially from a brute force attack.

How to Fix

Terraform

• Resource:
• Argument: require_uppercase_characters

📌 NOTE All commands starting with aws iam update-account-password-policy can be combined into a single command.