Skip to content

Latest commit

 

History

History
25 lines (21 loc) · 2.02 KB

password-requires-lowercase.md

File metadata and controls

25 lines (21 loc) · 2.02 KB

CloudSploit

AWS / IAM / Password Requires Lowercase

Quick Info

Plugin Title Password Requires Lowercase
Cloud AWS
Category IAM
Description Ensures password policy requires at least one lowercase letter
More Info A strong password policy enforces minimum length, expirations, reuse, and symbol usage
AWS Link http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingPasswordPolicies.html
Recommended Action Update the password policy to require the use of lowercase letters

Detailed Remediation Steps

  1. Log in to the AWS Management Console.
  2. Select the "Services" option and search for IAM.
  3. Scroll down the left navigation panel and choose "Account Settings" under "Access management".
  4. Under the "Password Policy" configuration panel scroll down and click on "Change password policy" button.
  5. Under the "Password Policy" configuration panel scroll down and check the "Require at least one lowercase letter from Latin alphabet (a-z)". If the checkbox is not selected than the password policy does not require at least one lowercase letter.
  6. Click on the checkbox next to "Require at least one lowercase letter from Latin alphabet (a-z)" so "Password Policy" requires at least one lowercase letter to make the password more strong and secure.
  7. Click on the "Save changes" button to make the necessary changes.
  8. Now "Password Policy" ensures that the password requires at least one lowercase letter.