turbot/steampipe-mod-aws-compliance

Query: ec2_network_inteface_source_destination_check_enabled

Usage

powerpipe query aws_compliance.query.ec2_network_inteface_source_destination_check_enabled

SQL

select
network_interface_id as resource,
case
when interface_type not in ('aws_codestar_connections_managed', 'branch', 'efa', 'interface', 'lambda', 'quicksight') then 'skip'
when source_dest_check then 'ok'
else 'alarm'
end as status,
case
when interface_type not in ('aws_codestar_connections_managed', 'branch', 'efa', 'interface', 'lambda', 'quicksight') then title || ' is of ' || interface_type || ' network interface.'
when source_dest_check then title || ' source destination check enabled.'
else title || ' source destination check disabled.'
end as reason
, region, account_id
from
aws_ec2_network_interface;

Controls

The query is being used by the following controls: