turbot/aws_compliance

Control: 1 Amazon Redshift clusters should prohibit public access

Description

This control checks whether Amazon Redshift clusters are publicly accessible by evaluating the publiclyAccessible field in the cluster configuration item.

Remediation

  1. Open the Amazon Redshift console.
  2. On the navigation pane, choose Clusters and then select your public Amazon Redshift cluster.
  3. From the Cluster drop-down menu, choose Modify cluster.
  4. In Publicly accessible, choose No.
  5. Choose Modify.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.foundational_security_redshift_1

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.foundational_security_redshift_1 --share

SQL

This control uses a named query:

redshift_cluster_prohibit_public_access

Tags