IAM Password policy should have requirement for at least one lowercase character.
Explanation
IAM account password policies should ensure that passwords content including at least one lowercase character.
Insecure Example
The following example will fail the AWS042 check.
resource "aws_iam_account_password_policy" "strict" {
# ...
# require_lowercase_characters not set
# ...
}
Secure Example
The following example will pass the AWS042 check.
resource "aws_iam_account_password_policy" "strict" {
# ...
require_lowercase_characters = true
# ...
}