Controls
8 controls from PCI DSS v4.0 apply to this module.
| Control | Clause | Change |
|---|---|---|
| IAM password policies should have minimum length set to 14 or greateriam_account_password_policy_min_length_14 8.3.7 | 8.3.7 | |
| IAM password policies should require at least one lowercase letteriam_account_password_policy_one_lowercase_letter 8.3.7 | 8.3.7 | |
| IAM password policies should require at least one numberiam_account_password_policy_one_number 8.3.7 | 8.3.7 | |
| IAM password policies should require at least one symboliam_account_password_policy_one_symbol 8.3.7 | 8.3.7 | |
| IAM password policies should require at least one uppercase letteriam_account_password_policy_one_uppercase_letter 8.3.7 | 8.3.7 | |
| IAM password policies should prevent password reuseiam_account_password_policy_reuse_24 8.3.7 | 8.3.7 | |
| IAM password policies should have strong configurations with minimum length of 8 or greateriam_account_password_policy_strong_min_length_8 8.3.7 | 8.3.7 | |
| IAM password policies should expire passwords within 90 days or lessiam_password_policy_expire_90 8.3.6 | 8.3.6 |