Control: SES configuration set should enforce TLS usage

Description

This control ensures that TLS is enforced for SES configuration set. Enforcing TLS usage in SES configuration set is essential in securing email communications, ensuring data privacy, and maintaining compliance with various data protection standards.

Usage

Run the control in your terminal:

powerpipe control run terraform_aws_compliance.control.ses_configuration_set_tls_enforced

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_aws_compliance.control.ses_configuration_set_tls_enforced --share

SQL

This control uses a named query:

select
  address as resource,
  case
    when (attributes_std -> 'delivery_options' ->> 'tls_policy') = 'Require' then 'ok'
    else 'alarm'
  end as status,
  split_part(address, '.', 2) || case
    when (attributes_std -> 'delivery_options' ->> 'tls_policy')= 'Require' then ' TLS enforced'
    else ' TLS not enforced'
  end || '.' as reason
  , path || ':' || start_line
from
  terraform_resource
where
  type = 'aws_ses_configuration_set';

Control: SES configuration set should enforce TLS usage

Description

Usage

SQL

Tags