Removes all but length restrictions from password policy

JaneliaSciComp · May 10, 2022 · dc8add8 · dc8add8
1 parent 435c7aa
commit dc8add8
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/admin_api_stack/lib/cognitopool.ts b/admin_api_stack/lib/cognitopool.ts
@@ -38,7 +38,15 @@ export class CognitoPool extends Construct {
         Please login at ${adminBucketUrl} to change your password and access the service.`
       },
       autoVerify: { email: true },
-      accountRecovery: cognito.AccountRecovery.EMAIL_ONLY
+      accountRecovery: cognito.AccountRecovery.EMAIL_ONLY,
+      passwordPolicy: {
+        minLength: 14,
+        requireLowercase: false,
+        requireUppercase: false,
+        requireDigits: false,
+        requireSymbols: false,
+        tempPasswordValidity: cdk.Duration.days(7),
+      },
     });
 
     // this generates the clientId that will be used by the admin site