turbot/oci_compliance

Query: filestorage_filesystem_cmk_encryption_enabled

Usage

powerpipe query oci_compliance.query.filestorage_filesystem_cmk_encryption_enabled

SQL

select
f.id as resource,
case
when kms_key_id is not null
and kms_key_id <> '' then 'ok'
else 'alarm'
end as status,
case
when kms_key_id is not null
and kms_key_id <> '' then f.title || ' encrypted with CMK.'
else f.title || ' not encrypted with CMK.'
end as reason,
f.region as region,
f.tenant_name as tenant,
coalesce(c.name, 'root') as compartment
from
oci_file_storage_file_system as f
left join oci_identity_compartment as c on c.id = f.compartment_id;

Controls

The query is being used by the following controls: