turbot/gcp_compliance

Query: compute_instance_shielded_vm_enabled

Usage

powerpipe query gcp_compliance.query.compute_instance_shielded_vm_enabled

Steampipe Tables

SQL

select
self_link resource,
case
when shielded_instance_config @> '{"enableVtpm": true, "enableIntegrityMonitoring": true}' then 'ok'
else 'alarm'
end as status,
case
when shielded_instance_config @> '{"enableVtpm": true, "enableIntegrityMonitoring": true}' then title || ' shielded VM enabled.'
else title || ' shielded VM not enabled.'
end as reason,
location as location,
project as project
from
gcp_compute_instance;

Controls

The query is being used by the following controls: