turbot/aws_compliance

Query: kinesis_stream_encrypted_with_kms_cmk

Usage

powerpipe query aws_compliance.query.kinesis_stream_encrypted_with_kms_cmk

Steampipe Tables

SQL

select
stream_arn as resource,
case
when encryption_type = 'KMS'
and key_id <> 'alias/aws/kinesis' then 'ok'
else 'alarm'
end as status,
case
when encryption_type = 'KMS'
and key_id <> 'alias/aws/kinesis' then title || ' encrypted with CMK.'
else title || ' not encrypted with CMK.'
end as reason,
region,
account_id
from
aws_kinesis_stream;

Controls

The query is being used by the following controls: