turbot/aws_compliance

Control: 1 Security contact information should be provided for an AWS account

Description

This control checks if an Amazon Web Services (AWS) account has security contact information. The control fails if security contact information is not provided for the account.

Alternate security contacts allow AWS to contact another person about issues with your account in case you're unavailable. Notifications can be from AWS Support, or other AWS service teams about security-related topics associated with your AWS account usage.

Remediation

To add an alternate contact as a security contact to your AWS account, see Adding, changing, or removing alternate contacts in the AWS Billing and Cost Management User Guide.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.foundational_security_account_1

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.foundational_security_account_1 --share

SQL

This control uses a named query:

account_alternate_contact_security_registered

Tags