Query: Ensure EBS volumes attached to an EC2 instance is marked for deletion upon instance termination

Description

This rule ensures that Amazon Elastic Block Store volumes that are attached to Amazon Elastic Compute Cloud (Amazon EC2) instances are marked for deletion when an instance is terminated. If an Amazon EBS volume isn't deleted when the instance that it's attached to is terminated, it may violate the concept of least functionality.

Query

Tables used in this query:

• aws_ec2_instance

Controls using this query:

• 2.12 Ensure EBS volumes attached to an EC2 instance is marked for deletion upon instance termination
• Ensure EBS volumes attached to an EC2 instance is marked for deletion upon instance termination

SQL