Control: Neptune DB cluster snapshots should be encrypted at rest
Description
This control checks whether a Neptune DB cluster snapshot is encrypted at rest. The control fails if a Neptune DB cluster isn't encrypted at rest.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.neptune_db_cluster_snapshot_encryption_at_rest_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.neptune_db_cluster_snapshot_encryption_at_rest_enabled --shareSQL
This control uses a named query:
select db_cluster_snapshot_arn as resource, case when storage_encrypted then 'ok' else 'alarm' end as status, case when storage_encrypted then title || ' encrypted at rest.' else title || ' not encrypted at rest.' end as reason , region, account_idfrom aws_neptune_db_cluster_snapshot;