Control: DMS endpoints should use SSL
Description
This control checks whether an AWS DMS endpoint uses an SSL connection. The control fails if the endpoint doesn't use SSL.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.dms_endpoint_ssl_configured
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.dms_endpoint_ssl_configured --share
SQL
This control uses a named query:
select arn as resource, case when ssl_mode = 'none' then 'alarm' else 'ok' end as status, case when ssl_mode = 'none' then title || ' SSL not configured.' else title || ' SSL configured.' end as reason , region, account_idfrom aws_dms_endpoint;