Pasword policy & session timeout

🔐 1. Password Policy

✅ Purpose

Allows administrators to define and enforce password rules to enhance security and meet organizational needs.

🧩 Configurable Options

Parameter	Description
Minimum length	Minimum number of characters (e.g. 8, 12, 16)
Complexity requirements	Require uppercase, lowercase, numbers, and special characters
Password expiry	Passwords expire after X days (e.g. 90 days)
Password history	Prevent reuse of the last X passwords
Invalid login attempts	Lock account after Y failed login attempts
Lockout duration	Lock the account for a specific time (e.g. 30 minutes)

🔧 How to Configure

1. Log in to the admin portal.

2. Navigate to https://iam.console.vngcloud.vn/account-settings

3. Adjust the parameters as needed.

4. Click Save to apply changes.

---

⏱️ 2. Session Timeout Policy

✅ Purpose

Automatically logs users out after a period of inactivity to prevent unauthorized access.

🧩 Configurable Options

• 15 minutes

• 30 minutes

• 1 hour