turbot/alicloud_compliance

Control: 1.12 Ensure RAM password policy prevents password reuse

Description

It is recommended that the password policy prevent the reuse of passwords.

Remediation

Perform the following to set the password policy as expected:

From Console

  1. Logon to RAM console.
  2. Choose Identities > Settings.
  3. In the Password Strength Settings section, click Edit Password Rule.
  4. In the Password History Check Policy field, enter 5.
  5. Click OK.

From Command Line

aliyun ram SetPasswordPolicy --PasswordReusePrevention 5

Usage

steampipe check alicloud_compliance.control.cis_v100_1_12

SQL

This control uses a named query:

ram_account_password_policy_reuse_5

Tags