Control: Directory Service directories should have SNS notification enabled
Description
This control verifies whether SNS messaging has been set up to receive email or text notifications for any changes in the directory's status.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.directory_service_directory_sns_notifications_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.directory_service_directory_sns_notifications_enabled --shareSQL
This control uses a named query:
select arn as resource, case when jsonb_array_length(event_topics) > 0 then 'ok' else 'alarm' end as status, case when jsonb_array_length(event_topics) > 0 then title || ' SNS notifications enabled.' else title || ' SNS notifications disabled.' end as reason , region, account_idfrom aws_directory_service_directory;