:orphan: Clouds With Weak Password Policy ================================ This bot inspects all configured cloud accounts for the presence of a password policy for all configured user accounts. The checks require that passwords be at least eight characters in length, prevents ] password reuse, and requires special characters and numbers. The bot can be customized to tweak any of the values to adhere and enforce any desired password policy. Recommended Action ------------------ Leverage services such as AWS IAM to specify a strong password policy which adheres to industry standards and best practices. Reference the following link for guidance: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_account-policy.html Severity -------- Medium Resource Types Inspected ------------------------ Organization Services (Cloud Accounts) Reactive Hookpoints ------------------- resource.modified