PasswordPolicy ¶

class PasswordPolicy(TypedDict, closed=True):
    minimum_password_length: NotRequired[
        "capo_iam.types.minimum_password_length_type.minimumPasswordLengthType"
    ]
    """<p>Minimum length to require for IAM user passwords.</p>"""
    require_symbols: "capo_iam.types.boolean_type.booleanType"
    """<p>Specifies whether IAM user passwords must contain at least one of the following symbols:</p> <p>! @ # $ % ^ & * ( ) _ + - = [ ] { } | '</p>"""
    require_numbers: "capo_iam.types.boolean_type.booleanType"
    """<p>Specifies whether IAM user passwords must contain at least one numeric character (0 to 9).</p>"""
    require_uppercase_characters: "capo_iam.types.boolean_type.booleanType"
    """<p>Specifies whether IAM user passwords must contain at least one uppercase character (A to Z).</p>"""
    require_lowercase_characters: "capo_iam.types.boolean_type.booleanType"
    """<p>Specifies whether IAM user passwords must contain at least one lowercase character (a to z).</p>"""
    allow_users_to_change_password: "capo_iam.types.boolean_type.booleanType"
    """<p>Specifies whether IAM users are allowed to change their own password. Gives IAM users permissions to <code>iam:ChangePassword</code> for only their user and to the <code>iam:GetAccountPasswordPolicy</code> action. This option does not attach a permissions policy to each user, rather the permissions are applied at the account-level for all users by IAM.</p>"""
    expire_passwords: "capo_iam.types.boolean_type.booleanType"
    """<p>Indicates whether passwords in the account expire. Returns true if <code>MaxPasswordAge</code> contains a value greater than 0. Returns false if MaxPasswordAge is 0 or not present.</p>"""
    max_password_age: NotRequired[
        "capo_iam.types.max_password_age_type.maxPasswordAgeType"
    ]
    """<p>The number of days that an IAM user password is valid.</p>"""
    password_reuse_prevention: NotRequired[
        "capo_iam.types.password_reuse_prevention_type.passwordReusePreventionType"
    ]
    """<p>Specifies the number of previous passwords that IAM users are prevented from reusing.</p>"""
    hard_expiry: NotRequired["capo_iam.types.boolean_object_type.booleanObjectType"]
    """<p>Specifies whether IAM users are prevented from setting a new password via the Amazon Web Services Management Console after their password has expired. The IAM user cannot access the console until an administrator resets the password. IAM users with <code>iam:ChangePassword</code> permission and active access keys can reset their own expired console password using the CLI or API.</p>"""