Loading controls...
Benchmark: Disallow Instances
Description
This benchmark checks if RDS storage is encrypted and S3 bucket's versioning is enabled.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-aws-compliance
Start the Powerpipe server:
steampipe service startpowerpipe server
Open http://localhost:9033 in your browser and select Disallow Instances.
Run this benchmark in your terminal:
powerpipe benchmark run aws_compliance.benchmark.audit_manager_control_tower_disallow_instances
Snapshot and share results via Turbot Pipes:
powerpipe benchmark run aws_compliance.benchmark.audit_manager_control_tower_disallow_instances --share
Benchmarks
- 5.0.1 - Disallow RDS database instances that are not storage encrypted
- 5.1.1 - Disallow S3 buckets that are not versioning enabled