TMA-AWS-2.8
Ensure IAM password policy requires minimum length of 14 or greater
Mô tả
Password policies are used, in part, to enforce password complexity requirements. IAM password policies can ensure that passwords meet a minimum length. It is recommended that the password policy require a minimum password length of 14 characters. Setting a password policy with sufficient length requirements increases account resilience against brute force login attempts.
Cách kiểm tra
Phương pháp kiểm tra: Xem xét thủ công
Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.
Perform the following to ensure the password policy is configured as prescribed: From Console: 1. Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam 2. Select Account Settings on the left Pane 3. Located the 'Password Policy' section 4. Ensure "Minimum password length" is set to 14 or greater. From Command Line: 1. Run the following command: aws iam get-account-password-policy 2. Ensure the output includes: "MinimumPasswordLength": 14 (or higher)
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Perform the following to set the password policy as prescribed: From Console: 1. Login to AWS Console (with appropriate permissions to View Identity Access Management Account Settings) 2. Go to IAM Service 3. Select Account Settings on the Left Pane 4. Set "Minimum password length" to 14 or greater 5. Select "Apply password policy" From Command Line: 1. Run the following command: aws iam update-account-password-policy --minimum-password-length 14 Note: Note: All commands starting with "aws iam update-account-password-policy" can be combined into a single command.
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- authawscloudiam
- Tham chiếu
- CIS Amazon Web Services Foundations Benchmark v7.0.0 - 2.8 Ensure IAM password policy requires minimum length of 14 or greater