Query: GuardDuty Lambda protection should be enabled

Description

This control checks whether GuardDuty Lambda protection is enabled. For a standalone account, the control fails if GuardDuty Lambda protection is disabled in the account. In a multi-account environment, the control fails if the delegated GuardDuty administrator account and all member accounts don't have Lambda protection enabled.

Query

Tables used in this query:

• aws_guardduty_detector

Controls using this query:

• 6 GuardDuty Lambda Protection should be enabled
• GuardDuty Lambda protection should be enabled

SQL