Skip to content

no-password-reuse

Default Severity: medium

Explanation

IAM account password policies should prevent the reuse of passwords.

The account password policy should be set to prevent using any of the last five used passwords.

Possible Impact

Password reuse increase the risk of compromised passwords being abused

Suggested Resolution

Prevent password reuse in the policy

Insecure Example

The following example will fail the aws-iam-no-password-reuse check. 

 resource "aws_iam_account_password_policy" "bad_example" {
    # ...
    password_reuse_prevention = 1
    # ...
 }

Secure Example

The following example will pass the aws-iam-no-password-reuse check. 

 resource "aws_iam_account_password_policy" "good_example" {
    # ...
    password_reuse_prevention = 5
    # ...
 }