Azure and GCP Perimeter Security, CIS Updates, and Enhanced Plugins →
Powerpipe Hub 
Hub
Mods
turbot/steampipe-mod-azure-compliance
Overview
15Dashboards
1471Benchmarks
461Queries
8Variables
GitHub

Benchmark: 3.5.7 Enforce a minimum password complexity and change of characters when new passwords are created

Description

This requirement applies to single-factor authentication of individuals using passwords as individual or group authenticators, and in a similar manner, when passwords are used as part of multifactor authenticators. The number of changed characters refers to the number of changes required with respect to the total number of positions in the current password. To mitigate certain brute force attacks against passwords, organizations may also consider salting passwords.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-azure-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select 3.5.7 Enforce a minimum password complexity and change of characters when new passwords are created.

Run this benchmark in your terminal:

powerpipe benchmark run azure_compliance.benchmark.nist_sp_800_171_rev_2_3_5_7

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run azure_compliance.benchmark.nist_sp_800_171_rev_2_3_5_7 --share

Controls