IAM users sign in to the AWS Management Console.
The organization needs password length, complexity, and expiration requirements.
Which IAM capability is appropriate?
The IAM account password policy controls requirements for IAM user console passwords.
Detailed explanation
An S3 policy controls S3 resources, not IAM user password settings.
An S3 policy controls S3 resources, not IAM user password settings.
CloudTrail records API activity and does not enforce password rules.
CloudTrail records API activity and does not enforce password rules.
The account password policy defines requirements such as length, character types, reuse, and expiration for IAM users.
The account password policy defines requirements such as length, character types, reuse, and expiration for IAM users.
Shield protects against DDoS attacks and does not manage IAM password requirements.
Shield protects against DDoS attacks and does not manage IAM password requirements.
Check official documentation
Compare the following points with the official documentation.
IAM User GuideのUser passwordsとaccount password policyの説明を確認する。
What to confirm
IAMユーザーのパスワード作成・変更時に、設定したポリシーが適用される。
Key points
- IAM user
- Account password policy
- Console access
Notes
- Environment: AWS公式IAMドキュメントの確認
- Confirm current IAM capabilities and recommended practices in the official AWS documentation.
Foundation review
Authentication requirement
Password policy controls how IAM user passwords are created and changed.
Service boundaries
Shield, CloudTrail, and S3 bucket policies address different security boundaries and cannot configure IAM user password rules.