Ensure IAM password policy require at least one symbol
Risk
Password policies are used to enforce password complexity requirements. IAM password policies can be used to ensure password are comprised of different character sets. It is recommended that the password policy require at least one non-alphanumeric character.
Run this check with Prowler CLI
prowler aws --checks iam_password_policy_symbol
Fix finding with Prowler CLIfixer
prowler aws --checks iam_password_policy_symbol --fixer
ARN template
arn:partition:service:region:account-id:resource-id
Remediation
WUIReferences:
Ensure "Require at least one non-alphanumeric character" is checked under "Password Policy".
Source Code
Resource Type
Other