turbot/steampipe-mod-aws-compliance

Control: VPC endpoint services should have acceptance required enabled

Description

Ensure VPC endpoints connection requests to the service are accepted by the service owner.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.vpc_endpoint_service_acceptance_required_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.vpc_endpoint_service_acceptance_required_enabled --share

SQL

This control uses a named query:

select
service_id as resource,
case
when acceptance_required then 'ok'
else 'alarm'
end as status,
case
when acceptance_required then title || ' acceptance_required enabled.'
else title || ' acceptance_required disabled.'
end as reason
, region, account_id
from
aws_vpc_endpoint_service;

Tags