Benchmark: 164.308(a)(5)(ii)(D) Password management

Usage

Browse dashboards and select 164.308(a)(5)(ii)(D) Password management:

steampipe dashboard

Or run the benchmarks in your terminal:

steampipe check aws_compliance.benchmark.hipaa_final_omnibus_security_rule_2013_164_308_a_5_ii_d

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share aws_compliance.benchmark.hipaa_final_omnibus_security_rule_2013_164_308_a_5_ii_d

Controls

• IAM password policies for users should have strong configurations
• IAM user access keys should be rotated at least every 90 days
• IAM user credentials that have not been used in 90 days should be disabled
• Secrets Manager secrets should have automatic rotation enabled
• Secrets Manager secrets should be rotated within specific number of days
• Secrets Manager secrets should be rotated as per the rotation schedule

Tags