Cognito user pool password policies should have strong configurations

cognito
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Description

Password policies for Amazon Cognito user pools should enforce strong configurations to protect user credentials against brute force attacks and unauthorized access. Strong password requirements include minimum length, character complexity requirements, and appropriate temporary password validity periods. These settings help ensure that user passwords meet security standards and comply with organizational security requirements.

Remediation

Configure your Cognito user pool password policy to require strong passwords with a minimum length of 8 characters, require lowercase letters, uppercase letters, numbers, and symbols, and limit temporary password validity to 7 days or less. For guidance on configuring password policies, refer to the Adding user pool password requirements section of the Amazon Cognito Developer Guide.