turbot/steampipe-mod-snowflake-compliance

Control: Use built-in encryption functions in addition to the transparent encryption to encrypt/decrypt certain columns

Description

To encrypt/decrypt certain columns in addition to the transparent encryption provided by Snowflake, use the built-in encryption functions.

Usage

Run the control in your terminal:

powerpipe control run snowflake_compliance.control.security_overview_data_encryption_use_built_in_encryption_functions

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run snowflake_compliance.control.security_overview_data_encryption_use_built_in_encryption_functions --share

SQL

This control uses a named query:

select
account as resource,
'info' as status,
'Manual verification required.' as reason,
account
from
snowflake_user
limit 1;