Improve accounts management for SSM sessions

[arnaldo2792]

Issue or Feature Request:

With the current control container, there isn't any type of enforcement on passwords, inactive accounts, historical password storage, lock outs, etc. We could increase the security of the admin container by enforcing some of this through policies. A good example of what the policy should enforce is as follows:

• Inactive accounts – 90 days
• 15 minute idle sessions
• Lock within 10 failed attempts, for 30 minutes or more
• New and unique value for all new accounts
  • Minimum 12 characters, contain numbers and letters
  • Remember the last 4 passwords within the last 12 months
  • Passwords changed every 90 days