AWS > IAM >

Password Policy Allows To Change Password

MEDIUM

Source

CloudSploit

password-policy-allows-to-change-password

management console

Password Policy Allows To Change Password

Ensure IAM password policy allows users to change their passwords.

Password policy should allow users to rotate their passwords as a security best practice.

Recommended Actions

Update the password policy for users to change their passwords

Links

http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingPasswordPolicies.html

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.