Exam AWS Certified Security - Specialty SCS-C02 topic 1 question 213 discussion

For Amazon Cognito: You can configure password length requirements directly in Cognito user pools5 The minimum password length can be set between 6 and 99 characters, though users can set passwords up to 256 characters long5 This is configured through the Password Policy settings in the Cognito user pool5 For Active Directory (federated with IAM): Since IAM is federated with on-premises Active Directory, the password policies are managed at the Active Directory level13 Password length requirements can be configured in Active Directory through Group Policy settings13 Changes must be made in Active Directory, not IAM, since AD is the authoritative source for authentication