AWS042

IAM Password policy should have requirement for at least one lowercase character.

Explanation

IAM account password policies should ensure that passwords content including at least one lowercase character.

Insecure Example

The following example will fail the AWS042 check.

resource "aws_iam_account_password_policy" "strict" {
	# ...
	# require_lowercase_characters not set
	# ...
}

Secure Example

The following example will pass the AWS042 check.

resource "aws_iam_account_password_policy" "strict" {
	# ...
	require_lowercase_characters = true
	# ...
}