Table: aws_account_alternate_contact - Query AWS Account Alternate Contact using SQL
The AWS Account Alternate Contact is a feature that allows you to designate additional contacts for your AWS account. These contacts can be specified for different types of communication such as billing, operations, or security, providing an extra layer of management and oversight. It's an effective way to ensure important account-related information is received by the right people in your organization.
Table Usage Guide
The aws_account_alternate_contact
table in Steampipe provides you with information about the alternate contacts associated with your AWS account. You can use this table to query alternate contact-specific details, including the contact type, name, title, email, and phone number if you're a DevOps engineer or an AWS administrator. You can use this table to gather insights on alternate contacts, such as their role in the organization, their contact information, and more. The schema outlines the various attributes of your AWS Account Alternate Contact, including the account id, contact type, name, title, email, and phone number.
Important Notes
This table supports the optional list key column linked_account_id
, which comes with the following requirements:
- You must be an identity in the organization's management account or a delegated administrator account.
- The specified account ID must also be a member account in the same organization as yours.
- Your organization must have all features enabled.
- Your organization must have trusted access enabled for the Account Management service.
Examples
Basic info
Discover the segments that are linked to specific AWS accounts and the type of contact associated with them. This can be useful in understanding the communication channels and roles involved in managing these accounts.
select name, linked_account_id, contact_type, email_address, phone_number, contact_titlefrom aws_account_alternate_contact;
select name, linked_account_id, contact_type, email_address, phone_number, contact_titlefrom aws_account_alternate_contact;
Get billing alternate contact details
Discover the segments that contain alternate contact details specifically for billing purposes. This can be useful in instances where you need to directly reach out to the responsible parties for billing inquiries or issues.
select name, linked_account_id, contact_type, email_address, phone_number, contact_titlefrom aws_account_alternate_contactwhere contact_type = 'BILLING';
select name, linked_account_id, contact_type, email_address, phone_number, contact_titlefrom aws_account_alternate_contactwhere contact_type = 'BILLING';
Get alternate contact details for an account in the organization (using credentials from the management account)
Discover the alternate contact details for a specific account within your organization using information from the management account. This is useful for ensuring communication channels are updated and accurate.
select name, linked_account_id, contact_type, email_address, phone_number, contact_titlefrom aws_account_alternate_contactwhere linked_account_id = '123456789012';
select name, linked_account_id, contact_type, email_address, phone_number, contact_titlefrom aws_account_alternate_contactwhere linked_account_id = '123456789012';
Get operations alternate contact details for an account in the organization (using credentials from the management account)
This query is useful for identifying the alternate contact details related to security for a specific account within an organization. It allows for efficient monitoring and communication in case of any security-related issues or concerns.
select name, linked_account_id, contact_type, email_address, phone_number, contact_titlefrom aws_account_alternate_contactwhere linked_account_id = '123456789012' and contact_type = 'SECURITY';
select name, linked_account_id, contact_type, email_address, phone_number, contact_titlefrom aws_account_alternate_contactwhere linked_account_id = '123456789012' and contact_type = 'SECURITY';
Control examples
- All Controls > Account > Security contact information should be provided for an AWS account
- AWS Foundational Security Best Practices > Account > 1 Security contact information should be provided for an AWS account
- CIS v1.2.0 > 1 Identity and Access Management > 1.18 Ensure security contact information is registered
- CIS v1.3.0 > 1 Identity and Access Management > 1.2 Ensure security contact information is registered
- CIS v1.4.0 > 1 Identity and Access Management > 1.2 Ensure security contact information is registered
- CIS v1.5.0 > 1 Identity and Access Management > 1.2 Ensure security contact information is registered
- CIS v2.0.0 > 1 Identity and Access Management > 1.2 Ensure security contact information is registered
- CIS v3.0.0 > 1 Identity and Access Management > 1.2 Ensure security contact information is registered
Schema for aws_account_alternate_contact
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form. | |
account_id | text | =, !=, ~~, ~~*, !~~, !~~* | The AWS Account ID in which the resource is located. |
contact_title | text | The title associated with this alternate contact. | |
contact_type | text | = | The type of alternate contact. |
email_address | text | The email address associated with this alternate contact. | |
linked_account_id | text | = | Account ID to get alternate contact details for. |
name | text | The name associated with this alternate contact. | |
partition | text | The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov). | |
phone_number | text | The phone number associated with this alternate contact. | |
region | text | The AWS Region in which the resource is located. | |
sp_connection_name | text | =, !=, ~~, ~~*, !~~, !~~* | Steampipe connection name. |
sp_ctx | jsonb | Steampipe context in JSON form. | |
title | text | Title of the resource. |
Export
This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.
You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh
script:
/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- aws
You can pass the configuration to the command with the --config
argument:
steampipe_export_aws --config '<your_config>' aws_account_alternate_contact