turbot/aws_compliance

Query: elb_listener_use_secure_ssl_cipher

Usage

powerpipe query aws_compliance.query.elb_listener_use_secure_ssl_cipher

SQL

select
load_balancer_arn as resource,
case
when ssl_policy like any(
array [ 'ELBSecurityPolicy-TLS-1-2-2017-01',
'ELBSecurityPolicy-TLS-1-1-2017-01' ]
) then 'ok'
else 'alarm'
end as status,
case
when ssl_policy like any (
array [ 'ELBSecurityPolicy-TLS-1-2-2017-01',
'ELBSecurityPolicy-TLS-1-1-2017-01' ]
) then title || ' uses secure SSL cipher.'
else title || ' uses insecure SSL cipher.'
end as reason,
region,
account_id
from
aws_ec2_load_balancer_listener;

Controls

The query is being used by the following controls: