Homepage
About Snyk

IAM should have max password age Affecting IAM service in AWS

medium

    Is your enviroment affected by this misconfiguration?

    In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

    Test your applications
      Frameworks
      CIS-Controls CSA-CCM
    • Snyk ID SNYK-CC-TF-13
    • credit Snyk Research Team
    Report a new misconfiguration Found a mistake?

    Description

    That if your password is leaked, your exposure window is much longer

    How to fix?

    Set the max_password_age attribute to be less than 90 therefore reducing your exposure window

    References