apply-password-complexity-policy

[NoahKunin]

Take a look at our current 18F Enterprise Account password policy in IAM for the settings.

[janearc]

A task to apply a complexity policy to passwords for a set of users. hook is UpdateAccountPasswordPolicy

arguments

• whether the policy requires
  • lower (RequireLowercaseCharacters)
  • upper (RequireUppercaseCharacters)
  • 'symbol' ! @ # $ % ^ & * ( ) _ + - = [ ] { } | '
  • number (RequireNumbers)
• whether to allow the users to change their passwords (AllowUsersToChangePassword)
• whether to allow users to set the password after it expires (HardExpiry)
• how long to keep passwords (MaxPasswordAge) (in days)
• length (MinimumPasswordLength)
• whether to check against old passwords (PasswordReusePrevention) (an integer, number of old passwords)

returns

• number of transaction that was sent to amazon

syntax

• sendak apply-complexity-policy --upper --lower --symbol --min-length 24 --rotation 28d --store 6

[janearc]

note: this will require an account for a non-18F set of users