steampipe plugin install awssteampipe plugin install aws

Table: aws_efs_file_system

Amazon Elastic File System is a cloud storage service provided by Amazon Web Services designed to provide scalable, elastic, concurrent with some restrictions, and encrypted file storage for use with both AWS cloud services and on-premises resources.

Examples

Basic info

select
  name,
  file_system_id,
  owner_id,
  automatic_backups,
  creation_token,
  creation_time,
  life_cycle_state,
  number_of_mount_targets,
  performance_mode,
  throughput_mode
from
  aws_efs_file_system;

List file systems which are not encrypted at rest

select
  file_system_id,
  encrypted,
  kms_key_id,
  region
from
  aws_efs_file_system
where
  not encrypted;

Get the size of the data stored in each file system

select
  file_system_id,
  size_in_bytes ->> 'Value' as data_size,
  size_in_bytes ->> 'Timestamp' as data_size_timestamp,
  size_in_bytes ->> 'ValueInIA' as data_size_infrequent_access_storage,
  size_in_bytes ->> 'ValueInStandard' as data_size_standard_storage
from
  aws_efs_file_system;

List file systems which have root access

select
  title,
  p as principal,
  a as action,
  s ->> 'Effect' as effect,
  s -> 'Condition' as conditions
from
  aws_efs_file_system,
  jsonb_array_elements(policy_std -> 'Statement') as s,
  jsonb_array_elements_text(s -> 'Principal' -> 'AWS') as p,
  jsonb_array_elements_text(s -> 'Action') as a
where
  a in ('elasticfilesystem:clientrootaccess');

List file systems that do not enforce encryption in transit

select
  title
from
  aws_efs_file_system
where
  title not in (
    select
      title
    from
      aws_efs_file_system,
      jsonb_array_elements(policy_std -> 'Statement') as s,
      jsonb_array_elements_text(s -> 'Principal' -> 'AWS') as p,
      jsonb_array_elements_text(s -> 'Action') as a,
      jsonb_array_elements_text(s -> 'Condition' -> 'Bool' -> 'aws:securetransport') as ssl
    where
      p = '*'
      and s ->> 'Effect' = 'Deny'
      and ssl :: bool = false
  );

List file systems with automatic backups enabled

select
  name,
  automatic_backups,
  arn,
  file_system_id
from
  aws_efs_file_system
where
  automatic_backups = 'enabled';

Query examples

Control examples

.inspect aws_efs_file_system

AWS Elastic File System

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
arn	text	The Amazon Resource Name (ARN) for the EFS file system.
automatic_backups	text	Automatic backups use a default backup plan with the AWS Backup recommended settings for automatic backups.
creation_time	timestamp with time zone	The time that the file system was created.
creation_token	text	The opaque string specified in the request.
encrypted	boolean	A Boolean value that, if true, indicates that the file system is encrypted.
file_system_id	text	The ID of the file system, assigned by Amazon EFS.
kms_key_id	text	The ID of an AWS Key Management Service (AWS KMS) customer master key (CMK) that was used to protect the encrypted file system.
life_cycle_state	text	The lifecycle phase of the file system.
name	text	Name of the file system provided by the user.
number_of_mount_targets	bigint	The current number of mount targets that the file system has.
owner_id	text	The AWS account that created the file system.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
performance_mode	text	The performance mode of the file system.
policy	jsonb	The JSON formatted FileSystemPolicy for the EFS file system.
policy_std	jsonb	Contains the policy in a canonical form for easier searching.
provisioned_throughput_in_mibps	double precision	The throughput, measured in MiB/s, that you want to provision for a file system.
region	text	The AWS Region in which the resource is located.
size_in_bytes	jsonb	The latest known metered size (in bytes) of data stored in the file system.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tags associated with Filesystem.
throughput_mode	text	The throughput mode for a file system.
title	text	Title of the resource.

turbot/aws