Password Policy

Resource Type

AWS.PasswordPolicy

Resource ID Format

For Password Policy resources, the resource ID is constructed as such:

[AccountId]::AWS.PasswordPolicy

Example:

123456789012::AWS.PasswordPolicy

This allows you to differentiate between Password Policy resources across all AWS accounts you have linked by looking at the characters before the first colon.

Background

Password policies can be set on an AWS account to enforce complexity requirements. This resource models all of the password policy options to ensure it is compliant with your internal requirements.

Fields

Field	Type	Description
PasswordReusePrevention	Int	The number of previous passwords AWS remembers and prevents users from re-using
AllowUsersToChangePassword	Bool	Whether or not users can change their own password
AnyExist	Bool	Indicates whether or not a password policy has been explicitly set in the account. If false, the resource will show the default values for the other fields.

Example

{
    "AccountId": "123456789012",
    "AllowUsersToChangePassword": true,
    "AnyExist": true,
    "ExpirePasswords": true,
    "HardExpiry": null,
    "MaxPasswordAge": 90,
    "MinimumPasswordLength": 14,
    "Name": "AWS.PasswordPolicy",
    "PasswordReusePrevention": 24,
    "Region": "global",
    "RequireLowercaseCharacters": true,
    "RequireNumbers": true,
    "RequireSymbols": true,
    "RequireUppercaseCharacters": true,
    "ResourceId": "123456789012::AWS.PasswordPolicy",
    "ResourceType": "AWS.PasswordPolicy",
    "Tags": null,
    "TimeCreated": null
}