Plugin Title Password Reuse Prevention
Cloud AWS
Category IAM
Description Ensures password policy prevents previous password reuse
More Info A strong password policy enforces minimum length, expirations, reuse, and symbol usage
AWS Link http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingPasswordPolicies.html
Recommended Action Increase the minimum previous passwords that can be reused to 24.


Detailed Remediation Steps

  1. Log into the AWS Management Console.
  2. Select the "Services" option and search for IAM.
  3. Scroll down the left navigation panel and choose "Account Settings".
  4. Under the "Password Policy" configuration panel scroll down and check the "Prevent password reuse ". If the checkbox is not selected than the password policy does not prevents the reuse of password.
  5. Repeat steps number 3 and 4 to prevent reuse of password .
  6. Click on the checkbox next to "Prevent password reuse" so "Password Policy" prevents reuse of the older passwords. Enter the "Number of passwords to remember" to 24 .
  7. Click on the "Apply Password Policy" button to make the necessary changes.

Want to scan for this risk automatically?

Get Started Now