turbot/gcp_compliance

Query: dataproc_cluster_encryption_with_cmek

Usage

powerpipe query gcp_compliance.query.dataproc_cluster_encryption_with_cmek

Steampipe Tables

SQL

select
cluster_name resource,
case
when config -> 'encryptionConfig' ->> 'gcePdKmsKeyName' is null then 'alarm'
else 'ok'
end as status,
case
when config -> 'encryptionConfig' ->> 'gcePdKmsKeyName' is null
then title || ' is not encrypted using customer-managed encryption keys (CMEK).'
else title || ' is encrypted using customer-managed encryption keys (CMEK).'
end as reason
, location as location, project as project
from
gcp_dataproc_cluster;

Controls

The query is being used by the following controls: