turbot/steampipe-mod-aws-compliance

Control: MQ brokers should restrict public access

Description

Ensure whether MQ broker is not publicly accessible. The rule is compliant if the MQ broker is publicly accessible.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.mq_broker_restrict_public_access

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.mq_broker_restrict_public_access --share

SQL

This control uses a named query:

select
arn as resource,
case
when publicly_accessible then 'alarm'
else 'ok'
end as status,
case
when publicly_accessible then title || ' publicly accessible.'
else title || ' not publicly accessible.'
end as reason
, region, account_id
from
aws_mq_broker;

Tags