Control: 3 Amazon MQ brokers should have automatic minor version upgrade enabled

Description

This control checks whether an Amazon MQ broker has automatic minor version upgrade enabled. The control fails if the broker doesn't have automatic minor version upgrade enabled.

As Amazon MQ releases and supports new broker engine versions, the changes are backward-compatible with an existing application and don't deprecate existing functionality. Automatic broker engine version updates protect you against security risks, help fix bugs, and improve functionality.

Remediation

To enable automatic minor version upgrade for an MQ broker, see Automatically upgrading the minor engine version in the Amazon MQ Developer Guide.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.foundational_security_mq_3

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.foundational_security_mq_3 --share

SQL

This control uses a named query:

select
  arn as resource,
  case
    when auto_minor_version_upgrade then 'ok'
    else 'alarm'
  end as status,
  case
    when auto_minor_version_upgrade then title || ' has automatic minor version upgrade enabled.'
    else title || ' has automatic minor version upgrade disabled.'
  end as reason
  
  , region, account_id
from
  aws_mq_broker;

Control: 3 Amazon MQ brokers should have automatic minor version upgrade enabled

Description

Remediation

Usage

SQL

Tags