No Password Reuse | Vulnerability Database

IAM account password policies should prevent the reuse of passwords.

The account password policy should be set to prevent using any of the last five used passwords.

Password reuse increase the risk of compromised passwords being abused

Follow the appropriate remediation steps below to resolve the issue.

Log into the AWS Management Console.
Select the “Services” option and search for IAM.
Scroll down the left navigation panel and choose “Account Settings”.
Under the “Password Policy” configuration panel scroll down and check the “Prevent password reuse “. If the checkbox is not selected than the password policy does not prevents the reuse of password.
Repeat steps number 3 and 4 to prevent reuse of password .
Click on the checkbox next to “Prevent password reuse” so “Password Policy” prevents reuse of the older passwords. Enter the “Number of passwords to remember” to 24 .
Click on the “Apply Password Policy” button to make the necessary changes.

Prevent password reuse in the policy

1
2
3
4
5


resource "aws_iam_account_password_policy" "good_example" {
  # ...
  password_reuse_prevention = 5
  # ...
}