Control: VPC network access control lists (network ACLs) should be associated with a subnet.
Description
Ensure there are no unused network access control lists (network ACLs). The rule is compliant if each network ACL is associated with a subnet. The rule is non-compliant if a network ACL is not associated with a subnet.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.vpc_network_acl_unusedSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.vpc_network_acl_unused --shareSQL
This control uses a named query:
select network_acl_id as resource, case when jsonb_array_length(associations) >= 1 then 'ok' else 'alarm' end status, case when jsonb_array_length(associations) >= 1 then title || ' associated with subnet.' else title || ' not associated with subnet.' end reason , region, account_idfrom aws_vpc_network_acl;