turbot/ibm_compliance

Control: 1.6 Ensure compliance with IBM Cloud password requirements

Description

A strong password is a very important step towards account security and safety. Passwords should never be shared with anyone, and must follow the strong password requirements as follows -

  • Password must contain at least one uppercase letter
  • Password must contain at least one lowercase letter
  • Password must contain at least one number
  • Password must contain at least 8 characters
  • Passwords should not be reused
  • Password must only contain ASCII characters
  • Password cannot contain spaces, or any of the special characters
  • Ensure the usage of a password meter which coaches user to create a stronger password than the minimum

Remediation

IBM Cloud automatically prevents the usage of any passwords that do not meet password requirements, when the users are created in IBMid system. When enterprises integrate through enterprise federation (using SAML), then enterprise identity system is responsible for enforcing password strength.

Usage

Run the control in your terminal:

powerpipe control run ibm_compliance.control.cis_v100_1_6

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run ibm_compliance.control.cis_v100_1_6 --share

SQL

This control uses a named query:

manual_control

Tags