AWS-IAM-password-policy-requires-at-least-one-lowercase-letter

Severity: High

Description: This control ensures that option “Requires at least one lowercase letter" is checked under password policy setting. IAM password policies can be used to ensure password are comprised of different character sets. It is recommended that the password policy require at least one lowercase letter.

Remediation Steps:

Perform following to update IAM policy for IAM user :

1. Login to the AWS Management Console at https://console.aws.amazon.com.

2. Navigate to IAM console.

3. On the Left Pane, click on Account Settings.

4. Click on Update Password Policy.

5. Check Requires at least one lowercase letter.

6. Click Apply password policy.

Important:

Reference:

• https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_account-policy.html

• https://docs.amazonaws.cn/en_us/config/latest/developerguide/iam-password-policy.html