AWS-IAM-Password-Requires-Numbers

Severity: Medium

Description: This control ensures that option 'Require at least one number" is checked under password policy setting. IAM password policies can be used to ensure password are comprised of different character sets. It is recommended that the password policy require at least one number.

Remediation Steps:

Perform following to update IAM policy for IAM user :

1. Login to the AWS Management Console at https://console.aws.amazon.com.

2. Navigate to IAM console.

3. On the Left Pane, click on Account Settings.

4. Click on Update Password Policy.

5. Check Requires at least one number.

6. Click Apply password policy.

Important:

Reference:

• https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_account-policy.html

• https://docs.amazonaws.cn/en_us/config/latest/developerguide/iam-password-policy.html