Control: Neptune cluster instance should not be publicly accessible
Description
This control checks whether Neptune cluster instances are not publicly accessible.
Usage
Run the control in your terminal:
powerpipe control run terraform_aws_compliance.control.neptune_cluster_instance_publicly_accessible
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_aws_compliance.control.neptune_cluster_instance_publicly_accessible --share
SQL
This control uses a named query:
select address as resource, case when (attributes_std ->> 'publicly_accessible')::boolean then 'alarm' else 'ok' end as status, split_part(address, '.', 2) || case when (attributes_std ->> 'publicly_accessible')::boolean then ' publicly accessible' else ' not publicly accessible' end || '.' as reason , path || ':' || start_linefrom terraform_resourcewhere type = 'aws_neptune_cluster_instance';