Control: Lambda functions should have code signing configured
Description
This control checks whether code signing is configured for lambda function.
Usage
Run the control in your terminal:
powerpipe control run terraform_aws_compliance.control.lambda_function_code_signing_configured
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_aws_compliance.control.lambda_function_code_signing_configured --share
SQL
This control uses a named query:
select address as resource, case when (attributes_std -> 'code_signing_config_arn') is null then 'alarm' else 'ok' end as status, split_part(address, '.', 2) || case when (attributes_std -> 'code_signing_config_arn') is null then ' code signing not configured' else ' code signing is configured' end || '.' as reason , path || ':' || start_linefrom terraform_resourcewhere type = 'aws_lambda_function';