Câu 9: AWS Certified Security - Specialty SCS-C03(New)

A security engineer discovers that a company’s user passwords have no required minimum length. The company is using the following two identity providers (IdPs):AWS Identity and Access Management (IAM) federated with on-premises Active DirectoryAmazon Cognito user pools that contain the user database for an AWS Cloud application that the company developedWhich combination of actions should the security engineer take to implement a required minimum length for the passwords? (Choose two.)

1. A. Update the password length policy in the IAM configuration.
2. B. Update the password length policy in the Cognito configuration. — đáp án hiện tại
3. C. Update the password length policy in the on-premises Active Directory configuration — đáp án hiện tại
4. D. Create an SCP in AWS Organizations. Configure the SCP to enforce a minimum password length for IAM and Cognito.
5. E. Create an IAM policy that includes a condition for minimum password length. Enforce the policy for IAM and Cognito.