Benchmark: Expected Tag Values
Description
Resources should have specific values for some tags.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-aws-tags
Start the Powerpipe server:
steampipe service startpowerpipe server
Open http://localhost:9033 in your browser and select Expected Tag Values.
Run this benchmark in your terminal:
powerpipe benchmark run aws_tags.benchmark.expected_tag_values
Snapshot and share results via Turbot Pipes:
powerpipe benchmark run aws_tags.benchmark.expected_tag_values --share
Controls
- Access Analyzer analyzers should have appropriate tag values
- API Gateway stages should have appropriate tag values
- CloudFront distributions should have appropriate tag values
- CloudTrail trails should have appropriate tag values
- CloudWatch alarms should have appropriate tag values
- CloudWatch log groups should have appropriate tag values
- CodeBuild projects should have appropriate tag values
- CodeCommit repositories should have appropriate tag values
- CodePipeline pipelines should have appropriate tag values
- Config rules should have appropriate tag values
- DAX clusters should have appropriate tag values
- Directory Service directories should have appropriate tag values
- DMS replication instances should have appropriate tag values
- DynamoDB tables should have appropriate tag values
- EBS snapshots should have appropriate tag values
- EBS volumes should have appropriate tag values
- EC2 application load balancers should have appropriate tag values
- EC2 classic load balancers should have appropriate tag values
- EC2 gateway load balancers should have appropriate tag values
- EC2 instances should have appropriate tag values
- EC2 network load balancers should have appropriate tag values
- EC2 reserved instances should have appropriate tag values
- ECR repositories should have appropriate tag values
- ECS container instances should have appropriate tag values
- ECS services should have appropriate tag values
- EFS file systems should have appropriate tag values
- EKS addons should have appropriate tag values
- EKS clusters should have appropriate tag values
- EKS identity provider configs should have appropriate tag values
- Elastic beanstalk applications should have appropriate tag values
- Elastic beanstalk environments should have appropriate tag values
- ElastiCache clusters should have appropriate tag values
- ElasticSearch domains should have appropriate tag values
- EventBridge rules should have appropriate tag values
- GuardDuty detectors should have appropriate tag values
- IAM roles should have appropriate tag values
- IAM server certificates should have appropriate tag values
- IAM users should have appropriate tag values
- Inspector assessment templates should have appropriate tag values
- Kinesis firehose delivery streams should have appropriate tag values
- KMS keys should have appropriate tag values
- Lambda functions should have appropriate tag values
- RDS DB clusters should have appropriate tag values
- RDS DB cluster parameter groups should have appropriate tag values
- RDS DB cluster snapshots should have appropriate tag values
- RDS DB instances should have appropriate tag values
- RDS DB option groups should have appropriate tag values
- RDS DB parameter groups should have appropriate tag values
- RDS DB snapshots should have appropriate tag values
- RDS DB subnet groups should have appropriate tag values
- Redshift clusters should have appropriate tag values
- Route53 domains should have appropriate tag values
- Route 53 Resolver endpoints should have appropriate tag values
- S3 buckets should have appropriate tag values
- SageMaker endpoint configurations should have appropriate tag values
- SageMaker models should have appropriate tag values
- SageMaker notebook instances should have appropriate tag values
- SageMaker training jobs should have appropriate tag values
- Secrets Manager secrets should have appropriate tag values
- SSM parameters should have appropriate tag values
- VPC elastic IP addresses should have appropriate tag values
- VPCs should have appropriate tag values
- VPC NAT gateways should have appropriate tag values
- VPC network ACLs should have appropriate tag values
- VPC security groups should have appropriate tag values
- VPC VPN connections should have appropriate tag values
- WAFV2 ip sets should have appropriate tag values
- WAFV2 regex pattern sets should have appropriate tag values
- WAFV2 rule groups should have appropriate tag values
- WAFV2 web acls should have appropriate tag values