action_trail_enabled action_trail_oss_bucket_not_public cs_kubernetes_cluster_ipvlan_enabled cs_kubernetes_cluster_network_policy_enabled ecs_disk_encryption_enabled ecs_instance_with_no_legacy_network ecs_security_group_remote_administration ecs_security_group_restrict_ingress_rdp_all ecs_security_group_restrict_ingress_ssh_all ecs_unattached_disk_encryption_enabled manual_control oss_bucket_encrypted_with_byok oss_bucket_encrypted_with_servcie_key oss_bucket_enforces_ssl oss_bucket_logging_enabled oss_bucket_public_access_blocked ram_account_password_policy_min_length_14 ram_account_password_policy_one_lowercase_letter ram_account_password_policy_one_number ram_account_password_policy_one_symbol ram_account_password_policy_one_uppercase_letter ram_account_password_policy_reuse_5 ram_password_policy_expire_90 ram_password_policy_max_login_attempts_5 ram_root_account_mfa_enabled ram_root_account_no_access_keys ram_root_account_unused ram_user_access_key_rotated_90 ram_user_console_access_mfa_enabled ram_user_no_policies ram_user_unused_90 rds_instance_postgresql_log_connections_parameter_on rds_instance_postgresql_log_disconnections_parameter_on rds_instance_postgresql_log_duration_parameter_on rds_instance_restrict_access_to_internet rds_instance_sql_audit_enabled rds_instance_sql_audit_retention_period_180_days rds_instance_ssl_enabled rds_instance_tde_enabled security_center_advanced_or_enterprise_edition

Query: ecs_disk_encryption_enabled

Usage

steampipe query alicloud_compliance.query.ecs_disk_encryption_enabled

Plugins & Tables

alicloud_ecs_disk

Alibaba Cloud plugin

SQL

select
  -- Required Columns
  arn as resource,
  case
    when encrypted then 'ok'
    else 'alarm'
  end as status,
  case
    when encrypted then title || ' encryption enabled.'
    else title || ' encryption disabled.'
  end as reason,
  -- Additional Dimensions
  region,
  account_id
from
  alicloud_ecs_disk
where
  status = 'In_use';

Controls

The query is being used by the following controls:

cis_v100_4_2