turbot/aws_perimeter

Control: RDS DB instances should prohibit public access

Description

Manage access to resources in the AWS Cloud by ensuring that RDS instances are not public.

Usage

Run the control in your terminal:

powerpipe control run aws_perimeter.control.rds_db_instance_prohibit_public_access

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_perimeter.control.rds_db_instance_prohibit_public_access --share

Steampipe Tables

SQL

select
arn as resource,
case
when publicly_accessible then 'alarm'
else 'ok'
end status,
case
when publicly_accessible then title || ' publicly accessible.'
else title || ' not publicly accessible.'
end reason
, region, account_id
from
aws_rds_db_instance;

Tags