Control: 1.8 Ensure RAM password policy requires at least one lowercase letter
Description
RAM password policies can be used to ensure password complexity. It is recommended that the password policy require at least one lowercase letter.
Remediation
Perform the following to set the password policy:
From Console
- Logon to RAM console.
- Choose
Identities > Settings. - In the
Password Strength Settingssection, clickEdit Password Rule. - In the
Required Elements in Passwordsection, selectLowercase Letter. - Click
OK.
From Command Line
aliyun ram SetPasswordPolicy --RequireLowercaseCharacters true
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v100_1_8Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v100_1_8 --shareSQL
This control uses a named query:
ram_account_password_policy_one_lowercase_letter