Back to All Checks
Medium Cognito Regional

Password policies for Cognito user pools should have strong configurations

Description

Flags Amazon Cognito user pools whose password policy does not meet the recommended baseline (8+ chars, requires upper/lower case, number, symbol, and a temporary password validity of no more than 7 days).

Remediation

Strengthen the user pool's password policy to meet the recommended baseline.

Steps

  1. Open the Amazon Cognito console and select the user pool.
  2. Choose Sign-in experience, then Edit.
  3. Under Password policy, set minimum length to at least 8 and require uppercase, lowercase, number, and symbol characters.
  4. Set the temporary password validity to no more than 7 days.
  5. Save the changes.
Start Your Free Security Check