turbot/oci_compliance

Query: objectstorage_bucket_cmk_encryption_enabled

Usage

powerpipe query oci_compliance.query.objectstorage_bucket_cmk_encryption_enabled

SQL

select
a.id as resource,
case
when kms_key_id is not null
and kms_key_id <> '' then 'ok'
else 'alarm'
end as status,
case
when kms_key_id is not null
and kms_key_id <> '' then a.title || ' encrypted with CMK.'
else a.title || ' not encrypted with CMK.'
end as reason,
a.region as region,
a.tenant_name as tenant,
coalesce(c.name, 'root') as compartment
from
oci_objectstorage_bucket as a
left join oci_identity_compartment as c on c.id = a.compartment_id;

Controls

The query is being used by the following controls: