Query: SSM documents should not be public

Description

This control checks whether AWS Systems Manager documents that are owned by the account are public. This control fails if SSM documents with the owner Self are public.

Query

Tables used in this query:

• aws_ssm_document
• aws_ssm_document_permission

Controls using this query:

• 4 SSM documents should not be public
• SSM documents should not be public

SQL