Ensure IAM password policy prevents password reuse

IAM password policies can prevent the reuse of a given password by the same user. It is recommended that the password policy prevent the reuse of passwords.

Suggest Edits

Risk Level: Low
Cloud Entity: AWS Identity and Access Management (IAM)
CloudGuard Rule ID: D9.TF.AWS.IAM.01
Covered by Spectral: No
Category: Security, Identity, & Compliance

GSL LOGIC

aws_iam_account_password_policy should have password_reuse_prevention = 24

REMEDIATION

Run aws iam update-account-password-policy --password-reuse-prevention 24

AWS Identity and Access Management (IAM)

AWS Identity and Access Management (IAM) enables you to manage access to AWS services and resources securely. Using IAM, you can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources.
IAM is a feature of your AWS account offered at no additional charge. You will be charged only for use of other AWS services by your users.

Compliance Frameworks

Terraform AWS CIS Foundations

Updated over 1 year ago