turbot/aws_compliance
Loading controls...

Control: Unused EC2 security groups should be removed

Description

This AWS control checks that security groups are attached to AWS Elastic Compute Cloud (AWS EC2) instances or to an elastic network interface. The control will fail if the security group is not associated with an AWS EC2 instance or an elastic network interface.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.vpc_security_group_unused

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.vpc_security_group_unused --share

SQL

This control uses a named query:

vpc_security_group_unused

Tags