turbot/steampipe-mod-aws-compliance

Query: rds_db_instance_sql_server_logging_enabled

Usage

powerpipe query aws_compliance.query.rds_db_instance_sql_server_logging_enabled

Steampipe Tables

SQL

select
arn as resource,
case
when not engine like 'sqlserver%' then 'skip'
when enabled_cloudwatch_logs_exports ?& array ['error'] then 'ok'
else 'alarm'
end as status,
case
when not engine like 'sqlserver%' then title || ' is of ' || engine || ' type.'
when enabled_cloudwatch_logs_exports ?& array ['error'] then title || ' logging enabled.'
else title || ' logging disabled.'
end as reason
, region, account_id
from
aws_rds_db_instance;

Controls

The query is being used by the following controls: