Rule: Ensure IAM password policy requires a minimum length of 14 or greater
This rule ensures that IAM password policy enforces a minimum length of 14 characters or more.
| Rule | Ensure IAM password policy requires a minimum length of 14 or greater |
| Framework | FedRAMP Low Revision 4 |
| Severity | ✔ Critical |
IAM Password Policy for FedRAMP Low Revision 4
Description:
The IAM (Identity and Access Management) password policy is a crucial security control designed to enforce secure password practices within the AWS (Amazon Web Services) account. This particular rule is required for compliance with the FedRAMP (Federal Risk and Authorization Management Program) Low control category, revision 4. The rule states that the minimum length of passwords should be 14 characters or greater.
Importance:
Enforcing a strong password policy helps protect the AWS resources and data from unauthorized access. By setting a minimum password length of 14 characters or greater, the likelihood of weak or easily guessable passwords is significantly reduced. This measure strengthens the overall security posture of the AWS account and aligns with the specific requirements of the FedRAMP Low control category.
Troubleshooting Steps:
If the IAM password policy does not have a minimum length of 14 or greater, you can follow the steps listed below for troubleshooting:
- 1.Ensure you have administrative access or necessary permissions to modify the IAM password policy.
- 2.Verify the current password policy settings by accessing the IAM Management Console.
Necessary Code:
No specific code is required for this policy as it involves modifying the IAM password policy settings through the AWS Management Console or using the AWS Command Line Interface (CLI).
Remediation Steps:
- 1.Open the AWS Management Console and navigate to the IAM service.
- 2.Click on "Account settings" in the left-hand navigation panel.
- 3.In the "Password Policy" section, click on "Edit" to modify the current policy.
- 4.Locate the "Minimum password length" option and set it to a value of 14 or greater.
- 5.Optionally, enable other password security features such as requiring specific character types (e.g., uppercase, lowercase, symbols).
- 6.Click on "Apply password policy" to save the changes.
CLI Command:
If you prefer using the AWS CLI for remediation, you can use the following command:
aws iam update-account-password-policy --minimum-password-length 14
Please ensure you have the necessary IAM permissions and AWS CLI configured with the appropriate credentials before executing the command.
Remember, setting a minimum password length of 14 or greater is an important step towards maintaining a secure AWS account and meeting the FedRAMP Low Revision 4 requirements.