Where is ASP.NET Core Identity's password policy?

Question

I created the ASP.NET Core Web Application (target .NET Core 3.1) MVC with Individual User Accounts Authentication option.

When I run the program, I notice that there are password policy enabled for account Register function. My question where is the password policy code located at?

I didn't notice any password policy configuration at Startup.cs

    // This method gets called by the runtime. Use this method to add services to the container.
    public void ConfigureServices(IServiceCollection services)
    {
        services.AddDbContext<ApplicationDbContext>(options =>
            options.UseSqlServer(
                Configuration.GetConnectionString("DefaultConnection")));
        services.AddDefaultIdentity<IdentityUser>(options => options.SignIn.RequireConfirmedAccount = true)
            .AddEntityFrameworkStores<ApplicationDbContext>();
        services.AddControllersWithViews();
        services.AddRazorPages();
    }