Control: MWAA environment should have worker logs enabled
Description
This control checks whether MWAA environment has worker logs enabled.
Usage
Run the control in your terminal:
powerpipe control run terraform_aws_compliance.control.mwaa_environment_worker_logs_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_aws_compliance.control.mwaa_environment_worker_logs_enabled --share
SQL
This control uses a named query:
select address as resource, case when (attributes_std -> 'logging_configuration' -> 'worker_logs' ->> 'enabled')::boolean then 'ok' else 'alarm' end as status, split_part(address, '.', 2) || case when (attributes_std -> 'logging_configuration' -> 'worker_logs' ->> 'enabled')::boolean then ' worker logs enabled' else ' worker logs disabled' end || '.' as reason , path || ':' || start_linefrom terraform_resourcewhere type = 'aws_mwaa_environment';