turbot/steampipe-mod-aws-compliance

Query: redshiftserverless_namespace_export_connection_and_user_log_to_cloudwatch

Usage

powerpipe query aws_compliance.query.redshiftserverless_namespace_export_connection_and_user_log_to_cloudwatch

SQL

select
namespace_arn as resource,
case
when log_exports @> '["connectionlog", "userlog"]' then 'ok'
else 'alarm'
end as status,
case
when log_exports @> '["connectionlog", "userlog"]' then title || ' exports connection and user logs to cloudwatch.'
when log_exports @> '["connectionlog"]' then title || ' exports only connection logs to cloudwatch.'
when log_exports @> '["userlog"]' then title || ' exports only user logs to cloudwatch.'
else title || ' does not export connection and user log to cloudwatch.'
end as reason
, region, account_id
from
aws_redshiftserverless_namespace;

Controls

The query is being used by the following controls: