Steampipe mods are now Powerpipe →

Plugins Docs Home

turbot/terraform_oci_compliance

blockstorage_block_volume_backup_enabled blockstorage_block_volume_encryption_enabled blockstorage_boot_volume_backup_encryption_enabled blockstorage_boot_volume_encryption_enabled cloudguard_enabled compute_instance_boot_volume_encryption_in_transit_enabled compute_instance_metadata_service_disabled compute_instance_monitoring_enabled database_db_encryption_enabled database_db_home_encryption_enabled database_db_system_encryption_enabled file_storage_file_system_encryption_enabled identity_authentication_password_policy_contains_lowercase_characters identity_authentication_password_policy_contains_numeric_characters identity_authentication_password_policy_contains_special_characters identity_authentication_password_policy_contains_uppercase_characters identity_authentication_password_policy_strong_min_length_14 objectstorage_bucket_encryption_enabled objectstorage_bucket_object_events_enabled objectstorage_bucket_public_access_blocked objectstorage_bucket_versioning_enabled vcn_default_security_group_allow_icmp_only vcn_has_inbound_security_list_configured vcn_inbound_security_lists_are_stateless vcn_network_security_group_restrict_ingress_rdp_all vcn_network_security_group_restrict_ingress_ssh_all vcn_security_group_has_stateless_ingress_security_rules vcn_security_list_restrict_ingress_rdp_all vcn_security_list_restrict_ingress_ssh_all vcn_subnet_public_access_blocked

Query: compute_instance_boot_volume_encryption_in_transit_enabled

Usage

powerpipe query terraform_oci_compliance.query.compute_instance_boot_volume_encryption_in_transit_enabled

Steampipe Tables

terraform_resource

Terraform plugin

SQL

select
  address as resource,
  case
    when (
      (
        attributes_std -> 'launch_options' -> 'is_pv_encryption_in_transit_enabled'
      ) is not null
      and (
        attributes_std -> 'launch_options' ->> 'is_pv_encryption_in_transit_enabled'
      ) :: boolean
    ) then 'ok'
    else 'alarm'
  end as status,
  name || case
    when (
      (
        attributes_std -> 'launch_options' -> 'is_pv_encryption_in_transit_enabled'
      ) is not null
      and (
        attributes_std -> 'launch_options' ->> 'is_pv_encryption_in_transit_enabled'
      ) :: boolean
    ) then ' encryption in transit enabled'
    else ' encryption in transit disabled'
  end || '.' reason,
  path || ':' || start_line
from
  terraform_resource
where
  type = 'oci_core_instance';

Controls

The query is being used by the following controls:

Compute instance boot volume encryption in transit should be enabled