diff --git a/policy-password.tf b/policy-password.tf new file mode 100644 index 0000000..25d980e --- /dev/null +++ b/policy-password.tf @@ -0,0 +1,13 @@ +resource "aws_iam_account_password_policy" "strict" { + minimum_password_length = 10 + require_uppercase_characters = true + require_lowercase_characters = true + require_numbers = true + require_symbols = true + allow_users_to_change_password = true +} + +resource "aws_iam_account_password_policy" "strict" { + max_password_age = 90 + password_reuse_prevention = 3 +}