AWS-IAM-Password-Requires-Uppercase

Severity: Medium

Description: This control ensures that option “Requires at least one uppercase letter" is checked under password policy setting. IAM password policies can be used to ensure password are comprised of different character sets. It is recommended that the password policy require at least one uppercase letter.

Remediation Steps:

Perform following to update IAM policy for IAM user :

1. Login to the AWS Management Console at https://console.aws.amazon.com.

2. Navigate to IAM console.

3. On the Left Pane, click on Account Settings.

4. Click on Update Password Policy.

5. Check Requires at least one uppercase letter.

6. Click Apply password policy.

Important:

Reference:

• https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_account-policy.html

• https://docs.amazonaws.cn/en_us/config/latest/developerguide/iam-password-policy.html