IAM Password Without Minimum Length

  • Query id: 9850d621-7485-44f7-8bdd-b3cf426315cf
  • Query name: IAM Password Without Minimum Length
  • Platform: Pulumi
  • Severity: Low
  • Category: Best Practices
  • CWE: 521
  • URL: Github

Description

IAM password should have the required minimum length
Documentation

Code samples

Code samples with security vulnerabilities

Positive test num. 1 - yaml file
name: aws-eks
runtime: yaml
description: An EKS cluster
resources:
  example:
    type: aws:iam:AccountPasswordPolicy
    properties:
---
name: aws-eks
runtime: yaml
description: An EKS cluster
resources:
  example:
    type: aws:iam:AccountPasswordPolicy
    properties:
      minimumPasswordLength: 10

Code samples without security vulnerabilities

Negative test num. 1 - yaml file
name: aws-eks
runtime: yaml
description: An EKS cluster
resources:
  example:
    type: aws:iam:AccountPasswordPolicy
    properties:
      minimumPasswordLength: 14