{
  "Provider": "aws",
  "CheckID": "iam_password_policy_minimum_length_14",
  "CheckTitle": "Ensure IAM password policy requires minimum length of 14 or greater",
  "CheckType": ["Software and Configuration Checks", "Industry and Regulatory Standards" ,"CIS AWS Foundations Benchmark"],
  "ServiceName": "iam",
  "SubServiceName": "",
  "ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
  "Severity": "medium",
  "ResourceType": "AwsIamPasswordPolicy",
  "Description": "Ensure IAM password policy requires minimum length of 14 or greater",
  "Risk": "Password policies are used to enforce password complexity requirements. IAM password policies can be used to ensure password are comprised of different character sets. It is recommended that the password policy require minimum length of 14 or greater.",
  "RelatedUrl": "",
  "Remediation": {
    "Code": {
      "CLI": "",
      "NativeIaC": "",
      "Other": "",
      "Terraform": ""
    },
    "Recommendation": {
      "Text": "Ensure \"Minimum password length\" is checked under \"Password Policy\".",
      "Url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_account-policy.html"
    }
  },
  "Categories": [],
  "Tags": {
    "Tag1Key": "value",
    "Tag2Key": "value"
  },
  "DependsOn": [],
  "RelatedTo": [],
  "Notes": "",
  "Compliance": [
    {
      "Control": [
        "1.9"
      ],
      "Framework": "CIS-AWS",
      "Group": [
        "level1"
      ],
      "Version": "1.4"
    }
  ]
}
