turbot/aws_compliance

Control: MSK clusters should be encrypted in transit among broker nodes

Description

This controls checks if an Amazon MSK cluster is encrypted in transit with HTTPS (TLS) among the broker nodes of the cluster. The control fails if plain text communication is enabled for a cluster broker node connection.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.msk_cluster_encryption_in_transit_with_tls_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.msk_cluster_encryption_in_transit_with_tls_enabled --share

SQL

This control uses a named query:

msk_cluster_encryption_in_transit_with_tls_enabled

Tags