IAM Password Without Minimum Length
- Query id: 8bc2168c-1723-4eeb-a6f3-a1ba614b9a6d
- Query name: IAM Password Without Minimum Length
- Platform: Ansible
- Severity: Low
- Category: Best Practices
- CWE: 710
- URL: Github
Description¶
IAM password should have the required minimum length
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Positive test num. 1 - yaml file
- name: Password policy for AWS account
community.aws.iam_password_policy:
state: present
require_symbols: false
require_numbers: true
require_uppercase: true
require_lowercase: true
allow_pw_change: true
pw_max_age: 60
pw_reuse_prevent: 5
pw_expire: false
- name: aws_iam_account_password_policy
community.aws.iam_password_policy:
state: present
min_pw_length: 3
require_symbols: false
require_numbers: true
require_uppercase: true
require_lowercase: true
allow_pw_change: true
pw_max_age: 60
pw_reuse_prevent: 5
pw_expire: false
- name: aws_iam_account_password_policy_2
community.aws.iam_password_policy:
state: present
minimum_password_length: 3
require_symbols: false
require_numbers: true
require_uppercase: true
require_lowercase: true
allow_pw_change: true
pw_max_age: 60
pw_reuse_prevent: 5
pw_expire: false
Code samples without security vulnerabilities¶
Negative test num. 1 - yaml file
- name: Password policy for AWS account
community.aws.iam_password_policy:
state: present
min_pw_length: 8
require_symbols: false
require_numbers: true
require_uppercase: true
require_lowercase: true
allow_pw_change: true
pw_max_age: 60
pw_reuse_prevent: 5
pw_expire: false
- name: aws_iam_account_password_policy
community.aws.iam_password_policy:
state: present
minimum_password_length: 8
require_symbols: false
require_numbers: true
require_uppercase: true
require_lowercase: true
allow_pw_change: true
pw_max_age: 60
pw_reuse_prevent: 5
pw_expire: false