Control: 7 Amazon Redshift clusters should use enhanced VPC routing
Description
This control checks whether an Amazon Redshift cluster has EnhancedVpcRouting enabled.
Enhanced VPC routing forces all COPY and UNLOAD traffic between the cluster and data repositories to go through your VPC. You can then use VPC features such as security groups and network access control lists to secure network traffic. You can also use VPC Flow Logs to monitor network traffic.
Remediation
For detailed remediation instructions, see Enabling enhanced VPC routing.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_redshift_7Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_redshift_7 --shareSQL
This control uses a named query:
select arn as resource, case when enhanced_vpc_routing then 'ok' else 'alarm' end as status, case when enhanced_vpc_routing then title || ' enhanced VPC routing enabled.' else title || ' enhanced VPC routing disabled.' end as reason , region, account_idfrom aws_redshift_cluster;