steampipe plugin install awssteampipe plugin install aws

Table: aws_docdb_cluster

Amazon DocumentDB (with MongoDB compatibility) is a fast, reliable, and fully managed database service. Amazon DocumentDB makes it easy to set up, operate, and scale MongoDB-compatible databases in the cloud. With Amazon DocumentDB, you can run the same application code and use the same drivers and tools that you use with MongoDB.

Examples

Basic Info

select
  arn,
  db_cluster_identifier,
  deletion_protection,
  engine,
  status,
  region
from
  aws_docdb_cluster;

List clusters which are not encrypted

select
  db_cluster_identifier,
  status,
  cluster_create_time,
  kms_key_id,
  storage_encrypted
from
  aws_docdb_cluster
where
  not storage_encrypted;

List clusters where backup retention period is greater than 7 days

select
  db_cluster_identifier,
  backup_retention_period
from
  aws_docdb_cluster
where
  backup_retention_period > 7;

Get avalability zone count for each cluster

select
  db_cluster_identifier,
  jsonb_array_length(availability_zones) as availability_zones_count
from
  aws_docdb_cluster;

List cluster members details

select
  db_cluster_identifier,
  member ->> 'DBClusterParameterGroupStatus' as db_cluster_parameter_group_status,
  member ->> 'DBInstanceIdentifier' as db_instance_identifier,
  member ->> 'IsClusterWriter' as is_cluster_writer,
  member ->> 'PromotionTier' as promotion_tier
from
  aws_docdb_cluster
  cross join jsonb_array_elements(members) as member;

List clusters where deletion protection is disabled

select
  db_cluster_identifier,
  status,
  cluster_create_time,
  deletion_protection
from
  aws_docdb_cluster
where
  not deletion_protection;

.inspect aws_docdb_cluster

AWS DocumentDB Cluster

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
arn	text	The Amazon Resource Name (ARN) for the Cluster.
associated_roles	jsonb	A list of AWS IAM roles that are associated with the cluster.
availability_zones	jsonb	A list of Availability Zones (AZs) where instances in the cluster can be created.
backup_retention_period	bigint	Specifies the number of days for which automatic snapshots are retained.
clone_group_id	text	Identifies the clone group to which the DB cluster is associated.
cluster_create_time	timestamp with time zone	Specifies the time when the cluster was created.
db_cluster_identifier	text	Contains a user-supplied cluster identifier. This identifier is the unique key that identifies a cluster.
db_cluster_parameter_group	text	Specifies the name of the cluster parameter group for the cluster.
db_cluster_resource_id	text	The Region-unique, immutable identifier for the cluster.
db_subnet_group	text	Specifies information on the subnet group associated with the cluster.
deletion_protection	boolean	Specifies whether the cluster has deletion protection enabled, or not.
earliest_restorable_time	timestamp with time zone	The earliest time to which a database can be restored with point-in-time restore.
enabled_cloudwatch_logs_exports	jsonb	A list of log types that this cluster is configured to export to Amazon CloudWatch Logs.
endpoint	text	Specifies the connection endpoint for the primary instance of the DB cluster.
engine	text	The name of the database engine to be used for this DB cluster.
engine_version	text	Indicates the database engine version.
hosted_zone_id	text	Specifies the ID that Amazon Route 53 assigns when you create a hosted zone.
kms_key_id	text	The AWS KMS key identifier for the encrypted cluster.
latest_restorable_time	timestamp with time zone	Specifies the latest time to which a database can be restored with point-in-time restore.
master_user_name	text	Contains the master username for the cluster.
members	jsonb	A list of instances that make up the cluster.
multi_az	boolean	Specifies whether the cluster has instances in multiple Availability Zones, or not.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
percent_progress	text	Specifies the progress of the operation as a percentage.
port	bigint	Specifies the port that the database engine is listening on.
preferred_backup_window	text	Specifies the daily time range during which automated backups are created.
preferred_maintenance_window	text	Specifies the weekly time range during which system maintenance can occur
read_replica_identifiers	jsonb	A list of identifiers of the read replicas associated with this cluster.
reader_endpoint	text	The reader endpoint for the DB cluster.
region	text	The AWS Region in which the resource is located.
replication_source_identifier	text	Contains the identifier of the source cluster if this cluster is a secondary cluster.
status	text	Specifies the current state of this cluster.
storage_encrypted	boolean	Specifies whether the cluster is encrypted, or not.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tags attached to the Cluster.
title	text	Title of the resource.
vpc_security_groups	jsonb	A list of VPC security groups that the DB cluster belongs to.

turbot/aws