The iam-password-policy in the Operational-Best-Practices-for-FedRAMP.yaml uses uppercase TRUE instead of the required lowercase true. Refer to https://docs.aws.amazon.com/config/latest/developerguide/iam-password-policy.html for "The true and false values for the rule parameters are case-sensitive. If true is not provided in lowercase, it will be treated as false."
I ran into this with Operational-Best-Practices-for-CMMC-Level-3.yaml - so it's probably a global problem anywhere the iam-password-policy module is used.
The
iam-password-policy
in theOperational-Best-Practices-for-FedRAMP.yaml
uses uppercaseTRUE
instead of the required lowercasetrue
. Refer to https://docs.aws.amazon.com/config/latest/developerguide/iam-password-policy.html for "The true and false values for the rule parameters are case-sensitive. If true is not provided in lowercase, it will be treated as false."