iam

Checks

• enforce-mfa IAM Groups should have MFA enforcement activated.

• no-password-reuse IAM Password policy should prevent password reuse.

• no-policy-wildcards IAM policy should avoid use of wildcards and instead apply the principle of least privilege

• require-lowercase-in-passwords IAM Password policy should have requirement for at least one lowercase character.

• require-numbers-in-passwords IAM Password policy should have requirement for at least one number in the password.

• require-symbols-in-passwords IAM Password policy should have requirement for at least one symbol in the password.

• require-uppercase-in-passwords IAM Password policy should have requirement for at least one uppercase character.

• set-max-password-age IAM Password policy should have expiry less than or equal to 90 days.

• set-minimum-password-length IAM Password policy should have minimum password length of 14 or more characters.