Steampipe mods are now Powerpipe →

Plugins Docs Home

turbot/alicloud_insights

0Controls

0Variables

account_count account_table action_trails_for_oss_bucket action_trails_for_ram_role bucket_policy_stds_for_oss_bucket ecs_autoscaling_groups_for_ecs_instance ecs_autoscaling_groups_for_rds_instance ecs_autoscaling_groups_for_vpc_vswitch ecs_disk_1_year_count ecs_disk_24_hours_count ecs_disk_30_90_days_count ecs_disk_30_days_count ecs_disk_90_365_days_count ecs_disk_age_table ecs_disk_attached_instances ecs_disk_attached_instances_count ecs_disk_auto_snapshot ecs_disk_auto_snapshot_deletion ecs_disk_by_account ecs_disk_by_category ecs_disk_by_creation_month ecs_disk_by_encryption_status ecs_disk_by_region ecs_disk_by_status ecs_disk_category ecs_disk_count ecs_disk_delete_auto_snapshot_count ecs_disk_encryption ecs_disk_encryption_status ecs_disk_encryption_table ecs_disk_input ecs_disk_iops ecs_disk_overview ecs_disk_storage ecs_disk_storage_by_account ecs_disk_storage_by_category ecs_disk_storage_by_creation_month ecs_disk_storage_by_region ecs_disk_storage_total ecs_disk_tags ecs_disk_top_10_read_ops_avg ecs_disk_top_10_write_ops_avg ecs_disk_unattached_count ecs_disk_unencrypted_count ecs_disks_for_ecs_instance ecs_disks_for_kms_key ecs_images_for_ecs_disk ecs_images_for_ecs_instance ecs_images_for_ecs_snapshot ecs_instance_1_year_count ecs_instance_24_hours_count ecs_instance_30_90_days_count ecs_instance_30_days_count ecs_instance_90_365_days_count ecs_instance_age_table ecs_instance_by_account ecs_instance_by_cpu_utilization_category ecs_instance_by_creation_month ecs_instance_by_deletion_protection ecs_instance_by_io_optimized ecs_instance_by_network_type ecs_instance_by_os_type ecs_instance_by_public_ip ecs_instance_by_region ecs_instance_by_state ecs_instance_by_type ecs_instance_count ecs_instance_cpu_cores ecs_instance_dedicated_host ecs_instance_deletion_protection_disabled_count ecs_instance_input ecs_instance_io_optimized ecs_instance_io_optimized_count ecs_instance_network_interfaces ecs_instance_os_type ecs_instance_overview ecs_instance_public_access ecs_instance_public_access_count ecs_instance_public_access_table ecs_instance_public_instance_count ecs_instance_security_groups ecs_instance_status ecs_instance_tags ecs_instance_top10_cpu_past_week ecs_instance_total_cores ecs_instance_total_cores_count ecs_instance_type ecs_instances_for_ecs_disk ecs_instances_for_ecs_security_group ecs_instances_for_ecs_snapshot ecs_instances_for_ram_role ecs_instances_for_vpc ecs_instances_for_vpc_vswitch ecs_launch_templates_for_ecs_security_group ecs_launch_templates_for_ecs_snapshot ecs_network_interfaces_for_ecs_instance ecs_network_interfaces_for_ecs_security_group ecs_network_interfaces_for_vpc ecs_network_interfaces_for_vpc_vswitch ecs_security_group_associated ecs_security_group_by_acount ecs_security_group_by_region ecs_security_group_by_type ecs_security_group_by_unrestricted_egress_status ecs_security_group_by_unrestricted_ingress_status ecs_security_group_by_vpc ecs_security_group_count ecs_security_group_egress_rule_sankey ecs_security_group_egress_rules ecs_security_group_ingress_rule_sankey ecs_security_group_ingress_rules ecs_security_group_input ecs_security_group_overview ecs_security_group_tags ecs_security_group_unassociated ecs_security_group_unassociated_count ecs_security_group_unassociated_status ecs_security_groups_for_ecs_instance ecs_security_groups_for_rds_instance ecs_security_groups_for_vpc ecs_security_unrestricted_egress ecs_security_unrestricted_egress_count ecs_security_unrestricted_ingress ecs_security_unrestricted_ingress_count ecs_snapshot_1_year_count ecs_snapshot_24_hours_count ecs_snapshot_30_90_days_count ecs_snapshot_30_days_count ecs_snapshot_90_365_days_count ecs_snapshot_age ecs_snapshot_age_table ecs_snapshot_by_account ecs_snapshot_by_creation_month ecs_snapshot_by_encryption_status ecs_snapshot_by_region ecs_snapshot_by_usage ecs_snapshot_count ecs_snapshot_encryption ecs_snapshot_encryption_status ecs_snapshot_input ecs_snapshot_instant_access ecs_snapshot_overview ecs_snapshot_source_disk ecs_snapshot_state ecs_snapshot_storage_by_account ecs_snapshot_storage_by_age ecs_snapshot_storage_by_region ecs_snapshot_storage_total ecs_snapshot_tags ecs_snapshot_usage ecs_snapshot_usage_source_disk_size ecs_snapshots_for_ecs_instance ecs_snapshots_for_kms_key ecs_unencrypted_snapshot_count ecs_unused_snapshot_count hsm_based_keys kms_cmk_lifecycle_table kms_cmk_pending_deletion_count kms_cmk_rotation_disabled_count kms_deletion_protection kms_deletion_protection_disabled_count kms_key_1_year_count kms_key_24_hours_count kms_key_30_90_days_count kms_key_30_days_count kms_key_90_365_days_count kms_key_age kms_key_age_table kms_key_aliases kms_key_by_account kms_key_by_creation_month kms_key_by_protection_level kms_key_by_region kms_key_by_state kms_key_count kms_key_deletion_protection_status kms_key_disabled_count kms_key_disabled_status kms_key_input kms_key_origin kms_key_overview kms_key_rds_instances kms_key_rotation_disabled_count kms_key_rotation_enabled kms_key_rotation_status kms_key_state kms_key_tags kms_keys_for_ecs_disk kms_keys_for_ecs_snapshot kms_keys_for_oss_bucket kms_protection_level kms_secrets_for_kms_key oss_bucket_1_year_count oss_bucket_24_hours_count oss_bucket_30_90_days_count oss_bucket_30_days_count oss_bucket_90_365_days_count oss_bucket_access_type oss_bucket_age_table oss_bucket_by_account oss_bucket_by_creation_month oss_bucket_by_default_encryption_status oss_bucket_by_logging_status oss_bucket_by_public_access_blocked_status oss_bucket_by_region oss_bucket_by_ssl_enforced_status oss_bucket_by_storage_class oss_bucket_by_versioning_status oss_bucket_count oss_bucket_encrypted_with_byok_count oss_bucket_encrypted_with_servcie_key_count oss_bucket_encryption oss_bucket_encryption_table oss_bucket_https_enforce oss_bucket_input oss_bucket_lifecycle_policy oss_bucket_lifecycle_table oss_bucket_logging oss_bucket_logging_disabled_count oss_bucket_logging_enabled oss_bucket_logging_table oss_bucket_overview oss_bucket_policy oss_bucket_public_access_not_blocked_count oss_bucket_public_access_table oss_bucket_server_side_encryption oss_bucket_ssl_not_enforced_count oss_bucket_tags_detail oss_bucket_unencrypted_count oss_bucket_versioning oss_bucket_versioning_disabled_count oss_buckets_for_kms_key ram_access_count ram_access_key_1_year_count ram_access_key_24_hours_count ram_access_key_30_90_days_count ram_access_key_30_days_count ram_access_key_90_365_days_count ram_access_key_age_table ram_all_policies_for_group ram_all_policies_for_user ram_credential_entities_console_access_with_no_mfa_count ram_credential_entities_count ram_credential_entities_root_access_keys_table ram_group_1_year_count ram_group_24_hours_count ram_group_30_90_days_count ram_group_30_days_count ram_group_90_365_days_count ram_group_age_table ram_group_count ram_group_input ram_group_overview ram_groups_by_account ram_groups_by_creation_month ram_groups_for_ram_policy ram_groups_for_ram_user ram_groups_for_user ram_groups_policies_count ram_groups_users_count ram_groups_with_no_attached_policy_count ram_groups_without_policies ram_groups_without_users ram_groups_without_users_count ram_policies_for_ram_group ram_policies_for_ram_role ram_policies_for_ram_user ram_policies_for_role ram_policy_alicloud_managed ram_policy_attached ram_policy_input ram_policy_overview ram_policy_statement ram_policy_std_for_ram_policy ram_role_1_year_count ram_role_24_hours_count ram_role_30_90_days_count ram_role_30_days_count ram_role_90_365_days_count ram_role_age_table ram_role_allows_cross_account_access_count ram_role_count ram_role_input ram_role_overview ram_role_policy_count_for_role ram_role_with_admin_access ram_role_with_admin_access_count ram_role_with_cross_account_access ram_roles_allow_admin_action ram_roles_allow_cross_account_access ram_roles_by_account ram_roles_by_creation_month ram_roles_for_ecs_instance ram_roles_for_ram_policy ram_roles_without_policy_count ram_user_1_year_count ram_user_24_hours_count ram_user_30_90_days_count ram_user_30_days_count ram_user_90_365_days_count ram_user_access_keys ram_user_age_table ram_user_by_creation_month ram_user_count ram_user_direct_attached_policy_count_for_user ram_user_input ram_user_manage_policies_hierarchy ram_user_manage_policies_sankey ram_user_mfa_devices ram_user_mfa_for_user ram_user_mfa_table ram_user_no_mfa_count ram_user_overview ram_users_by_account ram_users_by_mfa_enabled ram_users_for_group ram_users_for_ram_group ram_users_for_ram_policy ram_users_with_direct_attached_policy ram_users_with_direct_policy_count rds_backups_for_rds_instance rds_databases_for_rds_instance rds_db_instance_configuration rds_instance_1_year_count rds_instance_24_hours_count rds_instance_30_90_days_count rds_instance_30_days_count rds_instance_90_365_days_count rds_instance_age_table rds_instance_by_account rds_instance_by_class rds_instance_by_cpu_utilization_category rds_instance_by_creation_month rds_instance_by_encryption_status rds_instance_by_engine_type rds_instance_by_region rds_instance_by_status rds_instance_class rds_instance_collector_policy rds_instance_count rds_instance_engine_type rds_instance_input rds_instance_instance_public_access rds_instance_instance_tde_status rds_instance_overview rds_instance_parameter_groups rds_instance_public_access_table rds_instance_public_count rds_instance_public_status rds_instance_security_ips rds_instance_ssl_disabled_count rds_instance_ssl_enabled rds_instance_ssl_status rds_instance_storage rds_instance_tags rds_instance_top10_cpu_past_week rds_instance_unencrypted_count rds_instances_for_ecs_security_group rds_instances_for_vpc rds_instances_for_vpc_vswitch source_ecs_disks_for_ecs_snapshot source_ecs_snapshots_for_ecs_disk source_logging_oss_buckets_for_oss_bucket target_ecs_disks_for_ecs_snapshot target_ecs_snapshots_for_ecs_disk target_logging_oss_buckets_for_oss_bucket target_ro_rds_db_instances_for_rds_instance vpc_by_account vpc_by_region vpc_by_rfc1918_range vpc_by_size vpc_cidr_blocks vpc_count vpc_default_count vpc_default_status vpc_dhcp_options vpc_dhcp_options_sets_for_vpc vpc_egress_nacl_sankey vpc_eips_for_ecs_instance vpc_empty_status vpc_flow_logs_for_vpc vpc_flow_logs_for_vpc_vswitch vpc_gateways_detail vpc_ingress_nacl_sankey vpc_input vpc_ipv4_count vpc_ipv6_count vpc_is_default vpc_nat_gateways_for_vpc vpc_nat_gateways_for_vpc_vswitch vpc_network_acls_for_vpc_vswitch vpc_no_vswitch_count vpc_overview vpc_route_tables_detail vpc_route_tables_for_vpc vpc_route_tables_for_vpc_vswitch vpc_routes_detail vpc_security_groups_detail vpc_tags vpc_vpcs_for_ecs_instance vpc_vpcs_for_ecs_security_group vpc_vpcs_for_rds_instance vpc_vpcs_for_vpc_vswitch vpc_vswitch_association vpc_vswitch_available_ip_address_count vpc_vswitch_by_az vpc_vswitch_cidr_block vpc_vswitch_count vpc_vswitch_input vpc_vswitch_overview vpc_vswitch_status vpc_vswitch_tags vpc_vswitches_detail vpc_vswitches_for_ecs_instance vpc_vswitches_for_rds_instance vpc_vswitches_for_vpc

Query: oss_bucket_encrypted_with_servcie_key_count

Usage

powerpipe query alicloud_insights.query.oss_bucket_encrypted_with_servcie_key_count

Steampipe Tables

alicloud_kms_key

alicloud_oss_bucket

Alibaba Cloud plugin

SQL

select
  count(*) as value,
  'Encrypted With Service Key' as label
from
  alicloud_oss_bucket b
  left join alicloud_kms_key k on b.server_side_encryption ->> 'KMSMasterKeyID' = k.key_id
where
  server_side_encryption ->> 'SSEAlgorithm' = 'KMS'
  and k.creator = 'Oss';

Dashboards

The query is used in the dashboards:

AliCloud OSS Bucket Encryption Report