Control: 1.8 Ensure IAM password policy requires minimum length of 14 or greater
Password policies are, in part, used to enforce password complexity requirements. IAM password policies can be used to ensure passwords are at least a given length. It is recommended that the password policy require a minimum password length of 14.
Setting a complex password policy increases account resiliency against unethical password hackers.
Perform the following to set the password policy is configured as prescribed:
- Sign into the AWS console and navigate to the IAM Dashboard.
- Choose Account settings.
- Click Change or Change password policy (if no password policy set earlier).
- Ensure in the
Enforce minimum password lengthfield is set to 14, then choose Save changes.
From Command Line:
aws iam update-account-password-policy --minimum-password-length 14
Note: All commands starting with "aws iam update-account-password-policy" can be combined into a single command.
steampipe check aws_compliance.control.cis_v130_1_8
This control uses a named query:iam_account_password_policy_min_length_14