Control: MQ Broker should have audit logging enabled
Description
This control checks whether audit logging is enabled for the MQ Broker.
Usage
Run the control in your terminal:
powerpipe control run terraform_aws_compliance.control.mq_broker_audit_logging_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_aws_compliance.control.mq_broker_audit_logging_enabled --share
SQL
This control uses a named query:
select address as resource, case when ((attributes_std ->> 'engine_type') = 'RabbitMQ') and (attributes_std -> 'logs' ->> 'audit')::bool then 'ok' else 'alarm' end as status, split_part(address, '.', 2) || case when ((attributes_std ->> 'engine_type') = 'RabbitMQ') and (attributes_std -> 'logs' ->> 'audit')::bool is null then ' audit logging enabled' else ' audit logging disabled' end || '.' as reason , path || ':' || start_linefrom terraform_resourcewhere type = 'aws_mq_broker';