Misconfigured Password Policy Expiration
- Query id: ce60d060-efb8-4bfd-9cf7-ff8945d00d90
- Query name: Misconfigured Password Policy Expiration
- Platform: Terraform
- Severity: Low
- Category: Best Practices
- CWE: 521
- URL: Github
Description¶
No password expiration policy
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Positive test num. 1 - tf file
resource "aws_iam_account_password_policy" "positive1" {
minimum_password_length = 8
require_lowercase_characters = true
require_numbers = true
require_uppercase_characters = true
require_symbols = true
allow_users_to_change_password = true
max_password_age = 180
}
// comment
resource "aws_iam_account_password_policy" "positive2" {
minimum_password_length = 8
require_lowercase_characters = true
require_numbers = true
require_uppercase_characters = true
require_symbols = true
allow_users_to_change_password = true
}