RAM account password policy does not require symbols

Ce produit n'est pas pris en charge par le site Datadog que vous avez sélectionné. ().
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Metadata

Id: terraform-alicloud-ram-account-password-policy-not-required-symbols

Provider: Alicloud

Platform: Terraform

Severity: Low

Category: Secret Management

Learn More

Description

RAM account password security should require at least one symbol. Specifically, the alicloud_ram_account_password_policy resource must have the require_symbols attribute set to true. This rule flags cases where require_symbols is false as an IncorrectValue issue and suggests replacing it with true.

Compliant Code Examples

resource "alicloud_ram_account_password_policy" "corporate1" {
  minimum_password_length      = 9
  require_lowercase_characters = false
  require_uppercase_characters = false
  require_numbers              = false
  require_symbols              = true
  hard_expiry                  = true
  max_password_age             = 12
  password_reuse_prevention    = 5
  max_login_attempts           = 3
}

Non-Compliant Code Examples

resource "alicloud_ram_account_password_policy" "corporate2" {
  minimum_password_length      = 9
  require_lowercase_characters = false
  require_uppercase_characters = false
  require_numbers              = false
  require_symbols              = false
  hard_expiry                  = true
  max_password_age             = 12
  password_reuse_prevention    = 5
  max_login_attempts           = 3
}