Check provider logo

Ensure IAM password policy require at least one symbol

iam_password_policy_symbol

Severitymedium
Serviceiam
by Prowler

Ensure IAM password policy require at least one symbol

Risk

Password policies are used to enforce password complexity requirements. IAM password policies can be used to ensure password are comprised of different character sets. It is recommended that the password policy require at least one non-alphanumeric character.

Run this check with Prowler CLI

prowler aws --checks iam_password_policy_symbol

Run in Prowler Cloud

Fix finding with Prowler CLIfixer

prowler aws --checks iam_password_policy_symbol --fixer

ARN template

arn:partition:service:region:account-id:resource-id

Remediation

WUI

Ensure "Require at least one non-alphanumeric character" is checked under "Password Policy".

References:

Source Code

Resource Type

Other