Query: Amazon Inspector EC2 scanning should be enabled

Description

This control checks whether Amazon Inspector EC2 scanning is enabled. For a standalone account, the control fails if Amazon Inspector EC2 scanning is disabled in the account. In a multi-account environment, the control fails if the delegated Amazon Inspector administrator account and all member accounts don't have EC2 scanning enabled.

Query

Tables used in this query:

• aws_inspector2_organization_configuration
• aws_region

Controls using this query:

• 1 Amazon Inspector EC2 scanning should be enabled
• Amazon Inspector EC2 scanning should be enabled

SQL