turbot/gcp_compliance

Query: compute_disk_encrypted_with_csk

Usage

powerpipe query gcp_compliance.query.compute_disk_encrypted_with_csk

Steampipe Tables

SQL

select
self_link resource,
case
when disk_encryption_key_type = 'Customer supplied' then 'ok'
else 'alarm'
end as status,
case
when disk_encryption_key_type = 'Customer supplied'
then title || ' encrypted with customer-supplied encryption keys (CSEK).'
when disk_encryption_key_type = 'Customer managed'
then title || ' encrypted with customer-managed encryption keys.'
else title || ' encrypted with default Google-managed keys.'
end as reason
, location as location, project as project
from
gcp_compute_disk;

Controls

The query is being used by the following controls: