turbot/alicloud_compliance

Control: 1.8 Ensure RAM password policy requires at least one lowercase letter

Description

RAM password policies can be used to ensure password complexity. It is recommended that the password policy require at least one lowercase letter.

Remediation

Perform the following to set the password policy:

From Console

  1. Logon to RAM console.
  2. Choose Identities > Settings.
  3. In the Password Strength Settings section, click Edit Password Rule.
  4. In the Required Elements in Password section, select Lowercase Letter.
  5. Click OK.

From Command Line

aliyun ram SetPasswordPolicy --RequireLowercaseCharacters true

Usage

Run the control in your terminal:

powerpipe control run alicloud_compliance.control.cis_v100_1_8

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run alicloud_compliance.control.cis_v100_1_8 --share

SQL

This control uses a named query:

ram_account_password_policy_one_lowercase_letter

Tags