turbot/steampipe-mod-aws-compliance

Control: Ensure IAM password policy requires at least one uppercase letter

Description

Password policies, in part, enforce password complexity requirements. Use IAM password policies to ensure that passwords use different character sets.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.iam_account_password_policy_one_uppercase_letter

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.iam_account_password_policy_one_uppercase_letter --share

SQL

This control uses a named query:

select
'arn:' || a.partition || ':::' || a.account_id as resource,
case
when require_uppercase_characters then 'ok'
else 'alarm'
end as status,
case
when minimum_password_length is null then 'No password policy set.'
when require_uppercase_characters then 'Uppercase character required.'
else 'Uppercase character not required.'
end as reason
, a.account_id
from
aws_account as a
left join aws_iam_account_password_policy as pol on a.account_id = pol.account_id;

Tags