Control: EFS access points should enforce a root directory
Description
This control checks if AWS EFS access points are configured to enforce a root directory. The control fails if the value of Path is set to / (the default root directory of the file system).
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.efs_access_point_enforce_root_directorySnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.efs_access_point_enforce_root_directory --shareSQL
This control uses a named query:
select access_point_arn as resource, case when root_directory ->> 'Path'= '/' then 'alarm' else 'ok' end as status, case when root_directory ->> 'Path'= '/' then title || ' not configured to enforce a root directory.' else title || ' configured to enforce a root directory.' end as reason , region, account_idfrom aws_efs_access_point;