Quick Info
| Plugin Title | Password Requires Symbols |
| Cloud | AWS |
| Category | IAM |
| Description | Ensures password policy requires the use of symbols |
| More Info | A strong password policy enforces minimum length, expirations, reuse, and symbol usage |
| AWS Link | http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingPasswordPolicies.html |
| Recommended Action | Update the password policy to require the use of symbols |
Detailed Remediation Steps
- Log into the AWS Management Console.
- Select the “Services” option and search for IAM.
- Scroll down the left navigation panel and choose “Account Settings”.
- Under the “Password Policy” configuration panel scroll down and check the “Require at least one non-alphanumeric character”. If the checkbox is not selected than the password policy does not enforces the use of symbols in password.
- Repeat steps number 3 and 4 to ensures password policy requires symbols.
- Click on the checkbox next to “Require at least one non-alphanumeric character” so “Password Policy” requires at least one symbol to make the password more strong and secure.
- Click on the “Apply Password Policy” button to make the necessary changes.
