turbot/aws_insights

Query: dynamodb_table_encryption_table

Usage

powerpipe query aws_insights.query.dynamodb_table_encryption_table

SQL

select
t.name as "Name",
case
when t.sse_description ->> 'SSEType' = 'KMS' and k.key_manager = 'AWS' then 'AWS Managed'
when t.sse_description ->> 'SSEType' = 'KMS' and k.key_manager = 'CUSTOMER' then 'Customer Managed'
else 'Default'
end as "Type",
t.sse_description ->> 'KMSMasterKeyArn' as "Key ARN",
a.title as "Account",
t.account_id as "Account ID",
t.region as "Region",
t.arn as "ARN"
from
aws_dynamodb_table as t
left join aws_kms_key as k on t.sse_description ->> 'KMSMasterKeyArn' = k.arn
left join aws_account as a on t.account_id = a.account_id
order by
t.name;

Dashboards

The query is used in the dashboards: