Control: 1.6 Ensure IAM password policy prevents password reuse

Description

IAM password policies can prevent the reuse of a given password by the same user. It is recommended the password policy prevent the reuse of passwords.

Enforcing password history ensures that passwords are not reused in for a certain period of time by the same user. If a user is not allowed to use last 24 passwords, that window of time is greater. This helps maintain the effectiveness of password security.

Remediation

OCI IAM without Identity Domains - Identity Cloud Service (IDCS)

Login to IDCS Admin Console.
Expand the Navigation Drawer, click Settings, and then click Password Policy.
Click on Change Your Password Policy button.
Update the number of remembered passwords in Previous passwords remembered setting to 24 or greater.

OCI IAM with Identity Domains

Go to Identity Domains: https://cloud.oracle.com/identity/domains/.
Select the Compartment the Domain to remediate is in.
Click on the Domain to remediate.
Click on Settings.
Click on Password policy to remediate.
Click Edit password rules.
Update the number of remembered passwords in Previous passwords remembered setting to 24 or greater.

Usage

Run the control in your terminal:

powerpipe control run oci_compliance.control.cis_v200_1_6

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run oci_compliance.control.cis_v200_1_6 --share

SQL

This control uses a named query:

select
  id as resource,
  'info' as status,
  'Manual verification required.' as reason,
  name
from
  oci_identity_tenancy;

Control: 1.6 Ensure IAM password policy prevents password reuse

Description

Remediation

Usage

SQL

Tags