turbot/steampipe-mod-aws-compliance

Control: AppStream fleet default internet access should be disabled

Description

Enabling default internet access for AppStream fleet is not recommended. This control will be considered non-compliant if default internet access is enabled for AppStream fleet.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.appstream_fleet_default_internet_access_disabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.appstream_fleet_default_internet_access_disabled --share

SQL

This control uses a named query:

select
arn as resource,
case
when enable_default_internet_access then 'alarm'
else 'ok'
end as status,
case
when enable_default_internet_access then title || ' has default internet access enabled.'
else title || ' has default internet access disabled.'
end as reason
, region, account_id
from
aws_appstream_fleet;

Tags