enforce windows complexity requirements (Azure#284)

ARPA-H · Jul 12, 2021 · 5b6e41d · 5b6e41d
1 parent 3fcfbac
commit 5b6e41d
Showing 1 changed file with 14 additions and 3 deletions.
diff --git a/src/terraform/modules/jumpbox/main.tf b/src/terraform/modules/jumpbox/main.tf
@@ -34,10 +34,21 @@ resource "azurerm_key_vault" "jumpbox-keyvault" {
   tags = var.tags
 }
 
+resource "random_integer" "jumpbox-password-length" {
+  min = 8
+  max = 123
+}
+
 resource "random_password" "jumpbox-password" {
-  length           = 16
-  special          = true
-  override_special = "_%@"
+  length      = random_integer.jumpbox-password-length.result
+  upper       = true
+  lower       = true
+  number      = true
+  special     = true
+  min_upper   = 1
+  min_lower   = 1
+  min_numeric = 1
+  min_special = 1
 }
 
 resource "azurerm_key_vault_secret" "jumpbox-password" {