turbot/aws_compliance

Query: emr_cluster_encryption_at_rest_enabled

Usage

powerpipe query aws_compliance.query.emr_cluster_encryption_at_rest_enabled

SQL

select
cluster_arn as resource,
case
when s.name is null then 'alarm'
when s.name is not null and (encryption_configuration -> 'EnableAtRestEncryption')::bool then 'ok'
else 'alarm'
end as status,
case
when s.name is null then c.title || ' security configuration disabled.'
when s.name is not null and (encryption_configuration -> 'EnableAtRestEncryption')::bool then c.title || ' encryption at rest enabled.'
else c.title || ' encryption at rest disabled.'
end as reason
, c.region, c.account_id
from
aws_emr_cluster as c
left join aws_emr_security_configuration as s on c.security_configuration = s.name and s.region = s.region and s.account_id = c.account_id;

Controls

The query is being used by the following controls: