turbot/steampipe-mod-aws-compliance

Control: AWS account should be part of AWS Organizations

Description

Ensure that an AWS account is part of AWS Organizations. The rule is non-compliant if an AWS account is not part of AWS Organizations or AWS Organizations master account ID does not match rule parameter MasterAccountId.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.account_part_of_organizations

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.account_part_of_organizations --share

SQL

This control uses a named query:

select
arn as resource,
case
when organization_id is not null then 'ok'
else 'alarm'
end as status,
case
when organization_id is not null then title || ' is part of organization(s).'
else title || ' is not part of organization.'
end as reason
, region, account_id
from
aws_account;

Tags