Control: EFS access points should enforce a user identity
Description
This control checks whether AWS EFS access points are configured to enforce a user identity. This control fails if a POSIX user identity is not defined while creating the EFS access point.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.efs_access_point_enforce_user_identitySnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.efs_access_point_enforce_user_identity --shareSQL
This control uses a named query:
select access_point_arn as resource, case when posix_user is null then 'alarm' else 'ok' end as status, case when posix_user is null then title || ' does not enforce a user identity.' else title || ' enforces a user identity.' end as reason , region, account_idfrom aws_efs_access_point;