🧠 Oracle IAM Domain Password Policy has weak complexity requirements - prod.logic.yaml🟢

Contextual name: 🧠 prod.logic.yaml🟢
ID: /ce/ca/oracle/iam/domain-password-policy-weak-complexity/prod.logic.yaml
Tags:
- 🟢 Logic test success
- 🟢 Logic with extracts
- 🟢 Logic with test data

Uses

📗 Oracle IAM Domain Password Policy
🔌 Oracle IAM Group - object.extracts.yaml
🔌 Oracle IAM Domain Password Policy - object.extracts.yaml
🧪 test-data.json

Test Results 🟢

Generated at: 2026-09-22T15:07:57.780433283Z Open

Result	Id	Condition Index	Condition Text	Runtime Error
🟢	test1	✔️ `199`	✔️ `extract('CA10O1__name__c') == 'defaultPasswordPolicy'`	✔️ `null`
🟢	test2	✔️ `199`	✔️ `extract('CA10O1__name__c') == 'defaultPasswordPolicy'`	✔️ `null`
🟢	test3	✔️ `399`	✔️ `extract('CA10O1__name__c') == 'simplePasswordPolicy'`	✔️ `null`
🟢	test4	✔️ `499`	✔️ `extract('CA10O1__name__c') == 'standardPasswordPolicy'`	✔️ `null`
🟢	test5	✔️ `299`	✔️ `CA10O1__Oracle_IAM_Groups__r.hasNo(COMPLIANT)`	✔️ `null`
🟢	test6	✔️ `299`	✔️ `CA10O1__Oracle_IAM_Groups__r.hasNo(COMPLIANT)`	✔️ `null`
🟢	test7	✔️ `199`	✔️ `extract('CA10O1__name__c') == 'defaultPasswordPolicy'`	✔️ `null`
🟢	test8	✔️ `699`	✔️ `extract('CA10O1__minNumerals__c').isEmpty() \|\| extract('CA10O1__minNumerals__c') < number(1.0)`	✔️ `null`
🟢	test9	✔️ `299`	✔️ `CA10O1__Oracle_IAM_Groups__r.hasNo(COMPLIANT)`	✔️ `null`
🟢	test10	✔️ `599`	✔️ `extract('CA10O1__passwordLengthMinimum__c').isEmpty() \|\| extract('CA10O1__passwordLengthMinimum__c') < number(14.0)`	✔️ `null`
🟢	test11	✔️ `799`	✔️ `extract('CA10O1__minSpecialCharacters__c').isEmpty() \|\| extract('CA10O1__minSpecialCharacters__c') < number(1.0)`	✔️ `null`
🟢	test12	✔️ `800`	✔️ `otherwise`	✔️ `null`

Generation Bundle

	File	MD5
Open	`/ce/ca/oracle/iam/domain-password-policy-weak-complexity/policy.yaml`	`A9B3CAC8AFC5A525DCF3EA0371B6F96C`
Open	`/ce/ca/oracle/iam/domain-password-policy-weak-complexity/prod.logic.yaml`	`82D1ABD88EFACD31D1B24F712BC115B9`
Open	`/ce/ca/oracle/iam/domain-password-policy-weak-complexity/test-data.json`	`774504D3A92D956942FF87438F14F7FB`
Open	`/types/CA10O1__CaOracleIamGroup2__c/object.extracts.yaml`	`CC9779AF5A220F1133C93E0D6734D8DA`
Open	`/types/CA10O1__CaOracleIamDomainPasswordPolicy__c/object.extracts.yaml`	`C94C963FEE0071D2A78AD5782F88F5DD`

Available Commands

repo-manager policies generate FULL /ce/ca/oracle/iam/domain-password-policy-weak-complexity/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/oracle/iam/domain-password-policy-weak-complexity/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/oracle/iam/domain-password-policy-weak-complexity/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/oracle/iam/domain-password-policy-weak-complexity/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/oracle/iam/domain-password-policy-weak-complexity/prod.logic.yaml

Content

Open File

---
inputType: "CA10O1__CaOracleIamDomainPasswordPolicy__c"
testData:
  - file: "test-data.json"
importExtracts:
  - file: "/types/CA10O1__CaOracleIamDomainPasswordPolicy__c/object.extracts.yaml"
conditions:
  - status: "INAPPLICABLE"
    currentStateMessage: "The default password policy is auto-created and is not evaluated by this policy."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10O1__name__c"
        right:
          TEXT: "defaultPasswordPolicy"
  - status: "INAPPLICABLE"
    currentStateMessage: "This non-default password policy is not assigned to any Oracle IAM group."
    check:
      RELATED_LIST_HAS_NO:
        status: "COMPLIANT"
        relationshipName: "CA10O1__Oracle_IAM_Groups__r"
  - status: "INCOMPLIANT"
    currentStateMessage: "The assigned simple password policy has a fixed minimum length below 14 characters."
    remediationMessage: "Assign affected groups to a custom password policy that requires passwords to be at least 14 characters long and includes a numeric or special character."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10O1__name__c"
        right:
          TEXT: "simplePasswordPolicy"
  - status: "INCOMPLIANT"
    currentStateMessage: "The assigned standard password policy has a fixed minimum length below 14 characters."
    remediationMessage: "Assign affected groups to a custom password policy that requires passwords to be at least 14 characters long and includes a numeric or special character."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10O1__name__c"
        right:
          TEXT: "standardPasswordPolicy"
  - status: "INCOMPLIANT"
    currentStateMessage: "This assigned password policy minimum length is empty or configured below 14 characters."
    remediationMessage: "Update this assigned password policy to require passwords to be at least 14 characters long."
    check:
      OR:
        args:
          - IS_EMPTY:
              arg:
                EXTRACT: "CA10O1__passwordLengthMinimum__c"
          - LESS_THAN:
              left:
                EXTRACT: "CA10O1__passwordLengthMinimum__c"
              right:
                NUMBER: 14
  - status: "INCOMPLIANT"
    currentStateMessage: "This assigned password policy numeric character minimum is empty or configured below 1."
    remediationMessage: "Update this assigned password policy to require at least one numeric character."
    check:
      OR:
        args:
          - IS_EMPTY:
              arg:
                EXTRACT: "CA10O1__minNumerals__c"
          - LESS_THAN:
              left:
                EXTRACT: "CA10O1__minNumerals__c"
              right:
                NUMBER: 1
  - status: "INCOMPLIANT"
    currentStateMessage: "This assigned password policy special character minimum is empty or configured below 1."
    remediationMessage: "Update this assigned password policy to require at least one special character."
    check:
      OR:
        args:
          - IS_EMPTY:
              arg:
                EXTRACT: "CA10O1__minSpecialCharacters__c"
          - LESS_THAN:
              left:
                EXTRACT: "CA10O1__minSpecialCharacters__c"
              right:
                NUMBER: 1
otherwise:
  status: "COMPLIANT"
  currentStateMessage: "This assigned password policy requires a minimum length of at least 14 characters, at least one numeric character, and at least one special character."
relatedLists:
  - relationshipName: "CA10O1__Oracle_IAM_Groups__r"
    importExtracts:
      - file: "/types/CA10O1__CaOracleIamGroup2__c/object.extracts.yaml"
    conditions: []
    otherwise:
      status: "COMPLIANT"
      currentStateMessage: "This Oracle IAM group is assigned to the password policy."

Uses​

Test Results 🟢​

Generation Bundle​

Available Commands​

Content​

Uses

Test Results 🟢

Generation Bundle

Available Commands

Content