IAM password policy should prevent password reuse
What it checks
IAM password policy should prevent password reuse
Where it applies
Terraform: aws_iam_account_password_policy
CloudFormation: no CloudFormation type maps to these resources yet.
How to fix it
- Set password_reuse_prevention = 24 so the last 24 passwords cannot be reused.
Frameworks
- SOC 2 CC6.1
- PCI-DSS v4.0.1/8.3.7
- HIPAA 164.308(a)(5)(ii)(D)
- AWS FSBP IAM.7
These mappings are advisory, not an attestation of compliance.