At this moment, the only way for admins to enforce a password policy is to have an Atlassian Access subscription.

Password policy is a security component, so please consider including it in the default cloud subscription, and not in Atlassian Access, which is a separate product