turbot/aws_perimeter

Control: EC2 AMIs should not be shared publicly

Description

A shared AMI is an AMI that a developer created and made available for other developers to use within organisation or carefully shared to other accounts. If AMIs have embedded information about the environment, it could pose a security risk if shared publicly.

Usage

Run the control in your terminal:

powerpipe control run aws_perimeter.control.ec2_instance_ami_prohibit_public_access

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_perimeter.control.ec2_instance_ami_prohibit_public_access --share

Steampipe Tables

SQL

select
title as resource,
case when public then
'alarm'
else
'ok'
end as status,
case
when public then title || ' publicly accessible.'
else title || ' not publicly accessible.'
end as reason
, region, account_id
from
aws_ec2_ami;

Tags