Template will update the pwd policy with 90 days expiry of you IAM user passwords

Checks if IAM password policy require at least one symbol

.

Sends a report of IAM users which have Admin access. Administrator access should be given to trusted users only.

Checks if IAM password policy require expire passwords within 90 days

Checks if a log metric filter and alarm exist for VPC changes

Ensure credentials unused for 90 days or greater are disabled

Checks if IAM password policy prevents password reuse

Checks if IAM password policy require at least one number

Checks if IAM password policy require min length of 14

.

Ensure console credentials are rotated every 90 days or less

Checks if IAM password policy require lowerCase letter

Checks if IAM password policy require uppercase letter

Sends a report if your IAM user access keys are not changed in the past 90 days. Rotating the keys minimises the chance of malicious users gaining access to your account.