turbot/steampipe-mod-aws-compliance

Control: Elastic Beanstalk enhanced health reporting should be enabled

Description

AWS Elastic Beanstalk enhanced health reporting enables a more rapid response to changes in the health of the underlying infrastructure. These changes could result in a lack of availability of the application. Elastic Beanstalk enhanced health reporting provides a status descriptor to gauge the severity of the identified issues and identify possible causes to investigate.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.elastic_beanstalk_enhanced_health_reporting_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.elastic_beanstalk_enhanced_health_reporting_enabled --share

SQL

This control uses a named query:

select
application_name as resource,
case
when health_status is not null and health is not null then 'ok'
else 'alarm'
end as status,
case
when health_status is not null and health is not null then application_name || ' enhanced health check enabled.'
else application_name || ' enhanced health check disabled.'
end as reason
, region, account_id
from
aws_elastic_beanstalk_environment;

Tags