Control: 1 Amazon Redshift clusters should prohibit public access
Description
This control checks whether Amazon Redshift clusters are publicly accessible by evaluating the publiclyAccessible field in the cluster configuration item.
Remediation
- Open the Amazon Redshift console.
- On the navigation pane, choose Clusters and then select your public Amazon Redshift cluster.
- From the Cluster drop-down menu, choose Modify cluster.
- In
Publicly accessible, choose No. - Choose Modify.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_redshift_1Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_redshift_1 --shareSQL
This control uses a named query:
select cluster_namespace_arn as resource, case when publicly_accessible then 'alarm' else 'ok' end status, case when publicly_accessible then title || ' publicly accessible.' else title || ' not publicly accessible.' end reason
, region, account_idfrom aws_redshift_cluster;