Control: CloudWatch alarm action should be enabled
Description
Checks if AWS CloudWatch alarm actions are in enabled state. The rule is non-compliant if the CloudWatch alarm actions are not in enabled state.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.cloudwatch_alarm_action_enabled_checkSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.cloudwatch_alarm_action_enabled_check --shareSQL
This control uses a named query:
select arn as resource, case when actions_enabled then 'ok' else 'alarm' end as status, case when actions_enabled then title || ' alarm actions enabled.' else title || ' alarm actions disabled.' end as reason , region, account_idfrom aws_cloudwatch_alarm;