AWS RDS Redshift Password Policy

Question

For Audit purposes
we need to configure out AWS Redshift instance password policy as below:
Length =12 users or 15 admins, service, app or prod accounts.

Complexity: letters, digits, spec characters

Change Interval / Expiration = 90 days;

Password History = last 4 pw

Failed login lockout = 5 tries.

Can you please advise if this is feasible in Redshift.
I see there are options on AWS RDS PG to add extensions. So any documentation  / advice welcomed.
ty

Didier_Durand · Answer

Hi,

I think that you want to implement the pg Trusted Language Extensions (TLE) to enforce the password policy that you want as described here: https://repost.aws/knowledge-center/rds-postgresql-password-policy

```
A PostgreSQL passcheck hook checks passwords for SQL operations and doesn't 
allow users to set passwords listed in the password_check.bad_passwords table. 
The passcheck hook also checks password length and confirms that passwords 
contain uppercase and lowercase letters, numbers, and special characters.
```

Best,

Didier

fran keenan · Answer

Thanks Didier,
I'll test to see if this if feasible for Redshift.
Yes I saw above for PostgreSQL, and plan on using this for PG,
Just Redshift it appears different. I will try though
ty

AWS RDS Redshift Password Policy

Relevant content