iam_schema_managed_access_enablediam_user_at_least_two_users_with_accountadmin_roleiam_user_default_role_is_setiam_user_default_role_must_not_be_accountadminiam_user_with_accountadmin_role_have_emailiam_user_with_built_in_duo_mfa_enablediam_user_without_accountadmin_role_password_not_setmanual_controlmonitoring_user_password_rotated_regularlynetwork_policy_allowed_list_setnetwork_policy_blocked_list_set
Query: manual_control
Usage
powerpipe query snowflake_compliance.query.manual_controlSteampipe Tables
SQL
select account as resource, 'info' as status, 'Manual verification required.' as reason, accountfrom snowflake_userlimit 1;
Controls
The query is being used by the following controls:
- Use automatic key rotation for the CMK as provided by the cloud provider
- Enable periodic rekeying in Snowflake
- Enable Tri-Secret Secure in the target account when using the database Replication
- Use built-in encryption functions in addition to the transparent encryption to encrypt/decrypt certain columns
- Use Tri-Secret Secure
- Allow Snowflake to access your cloud storage location
- Allow firewall to connect client applications to Snowflake
- Use private connectivity with Snowflake