Control: Route 53 domains should have transfer lock enabled
Description
Ensure Route 53 registered domains are locked to prevent any unauthorized transfers to another domain name registrar.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.route53_domain_transfer_lock_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.route53_domain_transfer_lock_enabled --shareSQL
This control uses a named query:
select arn as resource, case when transfer_lock then 'ok' else 'alarm' end as status, case when transfer_lock then title || ' transfer lock enabled.' else title || ' transfer lock disabled.' end reason
, region, account_idfrom aws_route53_domain;