3 ms·
> Even AWS has their forced 90 password reset policy This is a policy set by the organization. You can easily change it to longer in IAM (or disable it entirel
by bradyd 2y ago
> Even AWS has their forced 90 password reset policy
This is a policy set by the organization. You can easily change it to longer in IAM (or disable it entirely).
- dylan604 2y agoSometimes, "you" are not able to do that and you just work for someone else managing that. I had 90 reset policy with 2FA. annoying AF Another AWS set of creds is SSO+2FA, and no longer has the rotating policy. It's like a breath of fresh air. Turns out, just like TFA, several security audits I've been through all list the password rotation policy in them.