aws_iam_account
access_keys_per_user_quota
Type: INT32
Provider name: AccessKeysPerUserQuota
account_access_keys_present
Type: INT32
Provider name: AccountAccessKeysPresent
account_id
Type: STRING
account_mfa_enabled
Type: INT32
Provider name: AccountMFAEnabled
account_signing_certificates_present
Type: INT32
Provider name: AccountSigningCertificatesPresent
attached_policies_per_group_quota
Type: INT32
Provider name: AttachedPoliciesPerGroupQuota
attached_policies_per_role_quota
Type: INT32
Provider name: AttachedPoliciesPerRoleQuota
attached_policies_per_user_quota
Type: INT32
Provider name: AttachedPoliciesPerUserQuota
global_endpoint_token_version
Type: INT32
Provider name: GlobalEndpointTokenVersion
group_policy_size_quota
Type: INT32
Provider name: GroupPolicySizeQuota
groups
Type: INT32
Provider name: Groups
groups_per_user_quota
Type: INT32
Provider name: GroupsPerUserQuota
groups_quota
Type: INT32
Provider name: GroupsQuota
mfa_devices
Type: INT32
Provider name: MFADevices
mfa_devices_in_use
Type: INT32
Provider name: MFADevicesInUse
password_policy
Type: STRUCT
Provider name: PasswordPolicy
Description: A structure that contains details about the account’s password policy.
allow_users_to_change_password
Type: BOOLEAN
Provider name: AllowUsersToChangePassword
Description: Specifies whether IAM users are allowed to change their own password. Gives IAM users permissions to iam:ChangePassword
for only their user and to the iam:GetAccountPasswordPolicy
action. This option does not attach a permissions policy to each user, rather the permissions are applied at the account-level for all users by IAM.
expire_passwords
Type: BOOLEAN
Provider name: ExpirePasswords
Description: Indicates whether passwords in the account expire. Returns true if MaxPasswordAge
contains a value greater than 0. Returns false if MaxPasswordAge is 0 or not present.
hard_expiry
Type: BOOLEAN
Provider name: HardExpiry
Description: Specifies whether IAM users are prevented from setting a new password via the Amazon Web Services Management Console after their password has expired. The IAM user cannot access the console until an administrator resets the password. IAM users with iam:ChangePassword
permission and active access keys can reset their own expired console password using the CLI or API.
max_password_age
Type: INT32
Provider name: MaxPasswordAge
Description: The number of days that an IAM user password is valid.
minimum_password_length
Type: INT32
Provider name: MinimumPasswordLength
Description: Minimum length to require for IAM user passwords.
password_reuse_prevention
Type: INT32
Provider name: PasswordReusePrevention
Description: Specifies the number of previous passwords that IAM users are prevented from reusing.
require_lowercase_characters
Type: BOOLEAN
Provider name: RequireLowercaseCharacters
Description: Specifies whether IAM user passwords must contain at least one lowercase character (a to z).
require_numbers
Type: BOOLEAN
Provider name: RequireNumbers
Description: Specifies whether IAM user passwords must contain at least one numeric character (0 to 9).
require_symbols
Type: BOOLEAN
Provider name: RequireSymbols
Description: Specifies whether IAM user passwords must contain at least one of the following symbols: ! @ # $ % ^ & * ( ) _ + - = [ ] { } | ‘
require_uppercase_characters
Type: BOOLEAN
Provider name: RequireUppercaseCharacters
Description: Specifies whether IAM user passwords must contain at least one uppercase character (A to Z).
password_policy_v2
Type: STRUCT
Provider name: PasswordPolicy
allow_users_to_change_password
Type: BOOLEAN
Provider name: AllowUsersToChangePassword
Description: Specifies whether IAM users are allowed to change their own password. Gives IAM users permissions to iam:ChangePassword
for only their user and to the iam:GetAccountPasswordPolicy
action. This option does not attach a permissions policy to each user, rather the permissions are applied at the account-level for all users by IAM.
expire_passwords
Type: BOOLEAN
Provider name: ExpirePasswords
Description: Indicates whether passwords in the account expire. Returns true if MaxPasswordAge
contains a value greater than 0. Returns false if MaxPasswordAge is 0 or not present.
hard_expiry
Type: BOOLEAN
Provider name: HardExpiry
Description: Specifies whether IAM users are prevented from setting a new password via the Amazon Web Services Management Console after their password has expired. The IAM user cannot access the console until an administrator resets the password. IAM users with iam:ChangePassword
permission and active access keys can reset their own expired console password using the CLI or API.
max_password_age
Type: INT32
Provider name: MaxPasswordAge
Description: The number of days that an IAM user password is valid.
minimum_password_length
Type: INT32
Provider name: MinimumPasswordLength
Description: Minimum length to require for IAM user passwords.
password_reuse_prevention
Type: INT32
Provider name: PasswordReusePrevention
Description: Specifies the number of previous passwords that IAM users are prevented from reusing.
require_lowercase_characters
Type: BOOLEAN
Provider name: RequireLowercaseCharacters
Description: Specifies whether IAM user passwords must contain at least one lowercase character (a to z).
require_numbers
Type: BOOLEAN
Provider name: RequireNumbers
Description: Specifies whether IAM user passwords must contain at least one numeric character (0 to 9).
require_symbols
Type: BOOLEAN
Provider name: RequireSymbols
Description: Specifies whether IAM user passwords must contain at least one of the following symbols: ! @ # $ % ^ & * ( ) _ + - = [ ] { } | ‘
require_uppercase_characters
Type: BOOLEAN
Provider name: RequireUppercaseCharacters
Description: Specifies whether IAM user passwords must contain at least one uppercase character (A to Z).
policies
Type: INT32
Provider name: Policies
policies_quota
Type: INT32
Provider name: PoliciesQuota
policy_size_quota
Type: INT32
Provider name: PolicySizeQuota
policy_versions_in_use
Type: INT32
Provider name: PolicyVersionsInUse
policy_versions_in_use_quota
Type: INT32
Provider name: PolicyVersionsInUseQuota
server_certificates
Type: INT32
Provider name: ServerCertificates
server_certificates_quota
Type: INT32
Provider name: ServerCertificatesQuota
signing_certificates_per_user_quota
Type: INT32
Provider name: SigningCertificatesPerUserQuota
Type: UNORDERED_LIST_STRING
user_policy_size_quota
Type: INT32
Provider name: UserPolicySizeQuota
users
Type: INT32
Provider name: Users
users_quota
Type: INT32
Provider name: UsersQuota
versions_per_policy_quota
Type: INT32
Provider name: VersionsPerPolicyQuota