turbot/aws_compliance
Loading controls...

Control: EMR clusters client side encryption (CSE CMK) enabled with CMK

Description

This control checks whether EMR client side encryption (CSE CMK) is enabled with CMK. The check fails if encryption at rest is not enabled with CSE-CMK.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.emr_cluster_encryption_at_rest_with_cse_cmk

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.emr_cluster_encryption_at_rest_with_cse_cmk --share

SQL

This control uses a named query:

emr_cluster_encryption_at_rest_with_cse_cmk

Tags