aws_iam_account_password_policy

Note: There is only a single policy allowed per AWS account. An existing policy will be lost when using this resource as an effect of this limitation.

Manages Password Policy for the AWS Account. See more about Account Password Policy in the official AWS docs.

Example Usage

resource "aws_iam_account_password_policy" "strict" {
  minimum_password_length        = 8
  require_lowercase_characters   = true
  require_numbers                = true
  require_uppercase_characters   = true
  require_symbols                = true
  allow_users_to_change_password = true
}

Argument Reference

The following arguments are supported:

• allow_users_to_change_password - (Optional) Whether to allow users to change their own password
• hard_expiry - (Optional) Whether users are prevented from setting a new password after their password has expired (i.e. require administrator reset)
• max_password_age - (Optional) The number of days that an user password is valid.
• minimum_password_length - (Optional) Minimum length to require for user passwords.
• password_reuse_prevention - (Optional) The number of previous passwords that users are prevented from reusing.
• require_lowercase_characters - (Optional) Whether to require lowercase characters for user passwords.
• require_numbers - (Optional) Whether to require numbers for user passwords.
• require_symbols - (Optional) Whether to require symbols for user passwords.
• require_uppercase_characters - (Optional) Whether to require uppercase characters for user passwords.

Attributes Reference

In addition to all arguments above, the following attributes are exported:

• expire_passwords - Indicates whether passwords in the account expire. Returns true if max_password_age contains a value greater than 0. Returns false if it is 0 or not present.

Import

IAM Account Password Policy can be imported using the word iam-account-password-policy, e.g.

$ terraform import aws_iam_account_password_policy.strict iam-account-password-policy