turbot/terraform_aws_compliance

Control: SQS queue policies should not allow ALL (*) actions

Description

SQS CloudWatch Logs destination policy should avoid wildcard in 'actions'.

Usage

Run the control in your terminal:

powerpipe control run terraform_aws_compliance.control.sqs_queue_policy_no_action_star

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_aws_compliance.control.sqs_queue_policy_no_action_star --share

SQL

This control uses a named query:

sqs_queue_policy_no_action_star

Tags