Control: AWS account should be part of AWS Organizations
Description
Ensure that an AWS account is part of AWS Organizations. The rule is non-compliant if an AWS account is not part of AWS Organizations or AWS Organizations master account ID does not match rule parameter MasterAccountId.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.account_part_of_organizations
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.account_part_of_organizations --share
SQL
This control uses a named query:
select arn as resource, case when organization_id is not null then 'ok' else 'alarm' end as status, case when organization_id is not null then title || ' is part of organization(s).' else title || ' is not part of organization.' end as reason , region, account_idfrom aws_account;