Control: Ensure IAM password policy requires a minimum length of 14 or greater
Description
Password policies, in part, enforce password complexity requirements. Use IAM password policies to ensure that passwords are at least a given length. Security Hub recommends that the password policy require a minimum password length of 14 characters.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.iam_account_password_policy_min_length_14Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.iam_account_password_policy_min_length_14 --shareSQL
This control uses a named query:
select 'arn:' || a.partition || ':::' || a.account_id as resource, case when minimum_password_length >= 14 then 'ok' else 'alarm' end as status, case when minimum_password_length is null then 'No password policy set.' else 'Minimum password length set to ' || minimum_password_length || '.' end as reason , a.account_idfrom aws_account as a left join aws_iam_account_password_policy as pol on a.account_id = pol.account_id;