Controls
7 controls from HIPAA Omnibus Rule 2013 apply to this module.
| Control | Clause | Change |
|---|---|---|
| IAM password policies should have minimum length set to 14 or greateriam_account_password_policy_min_length_14 164.308(a)(5)(ii)(D) | 164.308(a)(5)(ii)(D) | |
| IAM password policies should require at least one lowercase letteriam_account_password_policy_one_lowercase_letter 164.308(a)(5)(ii)(D) | 164.308(a)(5)(ii)(D) | |
| IAM password policies should require at least one numberiam_account_password_policy_one_number 164.308(a)(5)(ii)(D) | 164.308(a)(5)(ii)(D) | |
| IAM password policies should require at least one symboliam_account_password_policy_one_symbol 164.308(a)(5)(ii)(D) | 164.308(a)(5)(ii)(D) | |
| IAM password policies should require at least one uppercase letteriam_account_password_policy_one_uppercase_letter 164.308(a)(5)(ii)(D) | 164.308(a)(5)(ii)(D) | |
| IAM password policies should prevent password reuseiam_account_password_policy_reuse_24 164.308(a)(4)(ii)(B) | 164.308(a)(4)(ii)(B) | |
| IAM password policies should have strong configurations with minimum length of 8 or greateriam_account_password_policy_strong_min_length_8 164.308(a)(5)(ii)(D) | 164.308(a)(5)(ii)(D) |