Control: 17 RDS DB instances should be configured to copy tags to snapshots
Description
This control checks whether RDS DB instances are configured to copy all tags to snapshots when the snapshots are created.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_rds_17Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_rds_17 --shareSQL
This control uses a named query:
select arn as resource, case when copy_tags_to_snapshot then 'ok' else 'alarm' end as status, case when copy_tags_to_snapshot then title || ' copy tags to snapshot enabled.' else title || ' copy tags to snapshot disabled.' end as reason , region, account_idfrom aws_rds_db_instance;