turbot/aws_compliance

Control: CloudFormation stacks should have rollback enabled

Description

Ensure CloudFormation stacks have the rollback feature enabled. Rollback triggers enable you to have AWS CloudFormation monitor the state of your application during stack creation and updating, and to rollback that operation if the application breaches the threshold of any of the alarms you've specified.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.cloudformation_stack_rollback_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.cloudformation_stack_rollback_enabled --share

SQL

This control uses a named query:

cloudformation_stack_rollback_enabled

Tags