Control: 1.12 Ensure RAM password policy prevents password reuse
Description
It is recommended that the password policy prevent the reuse of passwords.
Remediation
Perform the following to set the password policy as expected:
From Console
- Logon to RAM console.
- Choose
Identities > Settings. - In the
Password Strength Settingssection, click EditPassword Rule. - In the
Password History Check Policyfield, enter5. - Click
OK.
From Command Line
aliyun ram SetPasswordPolicy --PasswordReusePrevention 5
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v100_1_12Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v100_1_12 --shareSQL
This control uses a named query:
ram_account_password_policy_reuse_5