turbot/aws_compliance

Query: es_domain_dedicated_master_nodes_min_3

Usage

powerpipe query aws_compliance.query.es_domain_dedicated_master_nodes_min_3

Steampipe Tables

SQL

select
arn as resource,
case
when elasticsearch_cluster_config ->> 'DedicatedMasterEnabled' = 'false' then 'alarm'
when elasticsearch_cluster_config ->> 'DedicatedMasterEnabled' = 'true'
and (
elasticsearch_cluster_config ->> 'DedicatedMasterCount'
) :: integer >= 3 then 'ok'
else 'alarm'
end status,
case
when elasticsearch_cluster_config ->> 'DedicatedMasterEnabled' = 'false' then title || ' dedicated master nodes disabled.'
else title || ' has ' || (
elasticsearch_cluster_config ->> 'DedicatedMasterCount'
) || ' dedicated master node(s).'
end as reason,
region,
account_id
from
aws_elasticsearch_domain;

Controls

The query is being used by the following controls: