aws_iam_account

account_id

Type: STRING

password_policy

Type: STRUCT
Provider name: PasswordPolicy
Description: A structure that contains details about the account’s password policy.

  • allow_users_to_change_password
    Type: BOOLEAN
    Provider name: AllowUsersToChangePassword
    Description: Specifies whether IAM users are allowed to change their own password. Gives IAM users permissions to iam:ChangePassword for only their user and to the iam:GetAccountPasswordPolicy action. This option does not attach a permissions policy to each user, rather the permissions are applied at the account-level for all users by IAM.
  • expire_passwords
    Type: BOOLEAN
    Provider name: ExpirePasswords
    Description: Indicates whether passwords in the account expire. Returns true if MaxPasswordAge contains a value greater than 0. Returns false if MaxPasswordAge is 0 or not present.
  • hard_expiry
    Type: BOOLEAN
    Provider name: HardExpiry
    Description: Specifies whether IAM users are prevented from setting a new password via the Amazon Web Services Management Console after their password has expired. The IAM user cannot access the console until an administrator resets the password. IAM users with iam:ChangePassword permission and active access keys can reset their own expired console password using the CLI or API.
  • max_password_age
    Type: INT32
    Provider name: MaxPasswordAge
    Description: The number of days that an IAM user password is valid.
  • minimum_password_length
    Type: INT32
    Provider name: MinimumPasswordLength
    Description: Minimum length to require for IAM user passwords.
  • password_reuse_prevention
    Type: INT32
    Provider name: PasswordReusePrevention
    Description: Specifies the number of previous passwords that IAM users are prevented from reusing.
  • require_lowercase_characters
    Type: BOOLEAN
    Provider name: RequireLowercaseCharacters
    Description: Specifies whether IAM user passwords must contain at least one lowercase character (a to z).
  • require_numbers
    Type: BOOLEAN
    Provider name: RequireNumbers
    Description: Specifies whether IAM user passwords must contain at least one numeric character (0 to 9).
  • require_symbols
    Type: BOOLEAN
    Provider name: RequireSymbols
    Description: Specifies whether IAM user passwords must contain at least one of the following symbols: ! @ # $ % ^ & * ( ) _ + - = { } | ‘
  • require_uppercase_characters
    Type: BOOLEAN
    Provider name: RequireUppercaseCharacters
    Description: Specifies whether IAM user passwords must contain at least one uppercase character (A to Z).

password_policy_v2

Type: STRUCT
Provider name: PasswordPolicy

  • allow_users_to_change_password
    Type: BOOLEAN
    Provider name: AllowUsersToChangePassword
    Description: Specifies whether IAM users are allowed to change their own password. Gives IAM users permissions to iam:ChangePassword for only their user and to the iam:GetAccountPasswordPolicy action. This option does not attach a permissions policy to each user, rather the permissions are applied at the account-level for all users by IAM.
  • expire_passwords
    Type: BOOLEAN
    Provider name: ExpirePasswords
    Description: Indicates whether passwords in the account expire. Returns true if MaxPasswordAge contains a value greater than 0. Returns false if MaxPasswordAge is 0 or not present.
  • hard_expiry
    Type: BOOLEAN
    Provider name: HardExpiry
    Description: Specifies whether IAM users are prevented from setting a new password via the Amazon Web Services Management Console after their password has expired. The IAM user cannot access the console until an administrator resets the password. IAM users with iam:ChangePassword permission and active access keys can reset their own expired console password using the CLI or API.
  • max_password_age
    Type: INT32
    Provider name: MaxPasswordAge
    Description: The number of days that an IAM user password is valid.
  • minimum_password_length
    Type: INT32
    Provider name: MinimumPasswordLength
    Description: Minimum length to require for IAM user passwords.
  • password_reuse_prevention
    Type: INT32
    Provider name: PasswordReusePrevention
    Description: Specifies the number of previous passwords that IAM users are prevented from reusing.
  • require_lowercase_characters
    Type: BOOLEAN
    Provider name: RequireLowercaseCharacters
    Description: Specifies whether IAM user passwords must contain at least one lowercase character (a to z).
  • require_numbers
    Type: BOOLEAN
    Provider name: RequireNumbers
    Description: Specifies whether IAM user passwords must contain at least one numeric character (0 to 9).
  • require_symbols
    Type: BOOLEAN
    Provider name: RequireSymbols
    Description: Specifies whether IAM user passwords must contain at least one of the following symbols: ! @ # $ % ^ & * ( ) _ + - = { } | ‘
  • require_uppercase_characters
    Type: BOOLEAN
    Provider name: RequireUppercaseCharacters
    Description: Specifies whether IAM user passwords must contain at least one uppercase character (A to Z).

access_keys_per_user_quota

Type: INT32
Provider name: AccessKeysPerUserQuota

account_access_keys_present

Type: INT32
Provider name: AccountAccessKeysPresent

account_mfa_enabled

Type: INT32
Provider name: AccountMFAEnabled

account_signing_certificates_present

Type: INT32
Provider name: AccountSigningCertificatesPresent

attached_policies_per_group_quota

Type: INT32
Provider name: AttachedPoliciesPerGroupQuota

attached_policies_per_role_quota

Type: INT32
Provider name: AttachedPoliciesPerRoleQuota

attached_policies_per_user_quota

Type: INT32
Provider name: AttachedPoliciesPerUserQuota

global_endpoint_token_version

Type: INT32
Provider name: GlobalEndpointTokenVersion

group_policy_size_quota

Type: INT32
Provider name: GroupPolicySizeQuota

groups

Type: INT32
Provider name: Groups

groups_per_user_quota

Type: INT32
Provider name: GroupsPerUserQuota

groups_quota

Type: INT32
Provider name: GroupsQuota

mfa_devices

Type: INT32
Provider name: MFADevices

mfa_devices_in_use

Type: INT32
Provider name: MFADevicesInUse

policies

Type: INT32
Provider name: Policies

policies_quota

Type: INT32
Provider name: PoliciesQuota

policy_size_quota

Type: INT32
Provider name: PolicySizeQuota

policy_versions_in_use

Type: INT32
Provider name: PolicyVersionsInUse

policy_versions_in_use_quota

Type: INT32
Provider name: PolicyVersionsInUseQuota

server_certificates

Type: INT32
Provider name: ServerCertificates

server_certificates_quota

Type: INT32
Provider name: ServerCertificatesQuota

signing_certificates_per_user_quota

Type: INT32
Provider name: SigningCertificatesPerUserQuota

user_policy_size_quota

Type: INT32
Provider name: UserPolicySizeQuota

users

Type: INT32
Provider name: Users

users_quota

Type: INT32
Provider name: UsersQuota

versions_per_policy_quota

Type: INT32
Provider name: VersionsPerPolicyQuota

tags

Type: UNORDERED_LIST_STRING