Control: AWS > HIPAA > Account > Ensure IAM password policy requires at least one lowercase letter

Password policies, in part, enforce password complexity requirements. Use IAM password policies to ensure that passwords use different character sets. Security Hub recommends that the password policy require at least one lowercase letter. Setting a password complexity policy increases account resiliency against brute force login attempts.

Resource Types

This control targets the following resource types:

AWS > Account

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-hipaa#/control/types/iamAccountPasswordPolicyOneLowercaseLetter

Category URI

tmod:@turbot/turbot#/control/categories/complianceHipaa

GraphQL

query controlType(id: "tmod:@turbot/aws-hipaa#/control/types/iamAccountPasswordPolicyOneLowercaseLetter") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-hipaa#/control/types/iamAccountPasswordPolicyOneLowercaseLetter'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-hipaa#/control/types/iamAccountPasswordPolicyOneLowercaseLetter"