turbot/steampipe-mod-aws-compliance

Control: Lambda functions tracing should be enabled

Description

AWS X-Ray can be used to visualize the components of application, identify performance bottlenecks, and troubleshoot requests that resulted in an error. Lambda functions send trace data to X-Ray, and X-Ray processes the data to generate a service map and searchable trace summaries.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.lambda_function_tracing_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.lambda_function_tracing_enabled --share

SQL

This control uses a named query:

select
arn as resource,
case
when tracing_config ->> 'Mode' = 'PassThrough' then 'alarm'
else 'ok'
end as status,
case
when tracing_config ->> 'Mode' = 'PassThrough' then title || ' has tracing disabled.'
else title || ' has tracing enabled.'
end as reason
, region, account_id
from
aws_lambda_function;

Tags