IAM password policy maximum age should be positive and no more than 90 days
What it checks
IAM password policy maximum age should be positive and no more than 90 days
Where it applies
Terraform: aws_iam_account_password_policy
CloudFormation: no CloudFormation type maps to these resources yet.
How to fix it
- Set max_password_age = 90
Frameworks
- SOC 2 CC6.1
- SOC 2 CC6.3
- PCI-DSS v4.0.1/8.3.9
- HIPAA 164.312(a)(1)
- HIPAA 164.312(d)
- AWS FSBP IAM.7
These mappings are advisory, not an attestation of compliance.