v1.0 for Steampipe, Powerpipe, Flowpipe, 116 plugins, and 44 mods →

Plugins Docs Home

turbot/snowflake_compliance

iam_schema_managed_access_enabled iam_user_at_least_two_users_with_accountadmin_role iam_user_default_role_is_set iam_user_default_role_must_not_be_accountadmin iam_user_with_accountadmin_role_have_email iam_user_with_built_in_duo_mfa_enabled iam_user_without_accountadmin_role_password_not_set manual_control monitoring_user_password_rotated_regularly network_policy_allowed_list_set network_policy_blocked_list_set

Query: iam_user_default_role_is_set

Usage

powerpipe query snowflake_compliance.query.iam_user_default_role_is_set

Steampipe Tables

Snowflake plugin

SQL

select
  name as resource,
  case when default_role = '' then
    'alarm'
  else
    'ok'
  end as status,
  case when default_role = '' then
    name || ' default_role is not set.'
  else
    name || ' default_role is set.'
  end as reason,
  account
from
  snowflake_user;

Controls

The query is being used by the following controls:

Set the default_role property for users