Skip to content

Latest commit

 

History

History
24 lines (20 loc) · 1.73 KB

password-requires-symbols.md

File metadata and controls

24 lines (20 loc) · 1.73 KB
Raw

CloudSploit

AWS / IAM / Password Requires Symbols

Quick Info
Plugin Title Password Requires Symbols
Cloud AWS
Category IAM
Description Ensures password policy requires the use of symbols
More Info A strong password policy enforces minimum length, expirations, reuse, and symbol usage
AWS Link http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingPasswordPolicies.html
Recommended Action Update the password policy to require the use of symbols

Detailed Remediation Steps

  1. Log into the AWS Management Console.
  2. Select the "Services" option and search for IAM.
  3. Scroll down the left navigation panel and choose "Account Settings".
  4. Under the "Password Policy" configuration panel scroll down and check the "Require at least one non-alphanumeric character". If the checkbox is not selected than the password policy does not enforces the use of symbols in password.
  5. Repeat steps number 3 and 4 to ensures password policy requires symbols.
  6. Click on the checkbox next to "Require at least one non-alphanumeric character" so "Password Policy" requires at least one symbol to make the password more strong and secure.
  7. Click on the "Apply Password Policy" button to make the necessary changes.