Which of the following is not an account password policy for IAM Users that can be set?

You have been asked to tighten up the password policies in your organization after a serious security breach, so you need to consider every possible security measure.

Which of the following is not an account password policy for IAM Users that can be set?
A .  Force IAM users to contact an account administrator when the user has allowed his or her password to expire.
B .  A minimum password length.
C .  Force IAM users to contact an account administrator when the user has entered his password incorrectly.
D .  Prevent IAM users from reusing previous passwords.

View Answer

Answer: C

Explanation:

IAM users need passwords in order to access the AWS Management Console. (They do not need passwords if they will access AWS resources programmatically by using the CLI, AWS SDKs, or the APIs.)

You can use a password policy to do these things:

Set a minimum password length.

Require specific character types, including uppercase letters, lowercase letters, numbers, and non-alphanumeric characters. Be sure to remind your users that passwords are case sensitive.

Allow all IAM users to change their own passwords.

Require IAM users to change their password after a specified period of time (enable password expiration).

Prevent IAM users from reusing previous passwords.

Force IAM users to contact an account administrator when the user has allowed his or her password to expire.

Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingPasswordPolicies.html