turbot/steampipe-mod-aws-compliance

Query: dms_endpoint_neptune_database_iam_authorization_enabled

Usage

powerpipe query aws_compliance.query.dms_endpoint_neptune_database_iam_authorization_enabled

Steampipe Tables

SQL

select
arn as resource,
case
when endpoint_type <> 'TARGET' then 'skip'
when neptune_settings is null then 'skip'
when (neptune_settings -> 'IamAuthEnabled')::bool then 'ok'
else 'alarm'
end as status,
case
when endpoint_type <> 'TARGET' then title || ' endpoint is not of target type.'
when neptune_settings is null then title || ' endpoint is not of neptune engine type.'
when (neptune_settings -> 'IamAuthEnabled')::bool then title || ' IAM authorization for neptune database enabled.'
else title || ' IAM authorization for neptune database disabled.'
end as reason
, region, account_id
from
aws_dms_endpoint;

Controls

The query is being used by the following controls: