steampipe plugin install awssteampipe plugin install aws

Table: aws_inspector2_coverage

AWS Inspector coverage refers to the extent to which the AWS resources in your environment are assessed for security vulnerabilities and compliance with security best practices by the AWS Inspector service.

Examples

Basic info

select
  source_account_id,
  resource_id,
  resource_type,
  scan_type,
  scan_status_reason,
  scan_status_code
from
  aws_inspector2_coverage;

List coverages that are inactive

select
  source_account_id,
  resource_id,
  resource_type,
  scan_status_code
from
  aws_inspector2_coverage
where
  scan_status_code = 'INACTIVE';

List EC2 resource type coverage

select
  source_account_id,
  scan_type,
  resource_id as ec2_instance_id,
  resource_type,
  ec2_ami_id,
  ec2_platform
from
  aws_inspector2_coverage
where
  resource_type = 'AWS_EC2_INSTANCE';

List coverages by EC2 instance tags

select
  source_account_id,
  scan_type,
  resource_id as ec2_instance_id,
  resource_type,
  ec2_ami_id,
  ec2_platform,
  ec2_instance_tags
from
  aws_inspector2_coverage
where
  ec2_inatance_tags = '{"foo": "bar", "foo1": "bar1"}';

List coverages by lambda function tags

select
  source_account_id,
  scan_type,
  resource_id as ec2_instance_id,
  resource_type,
  lambda_function_name,
  lambda_function_runtime,
  lambda_function_tags
from
  aws_inspector2_coverage
where
  lambda_function_tags = '{"foo": "bar", "foo1": "bar1"}';

List coverage details of a package scan

select
  source_account_id,
  resource_id,
  resource_type,
  scan_type
from
  aws_inspector2_coverage
where
  scan_type = 'PACKAGE';

Get ECR repository details of each coverage

select
  c.resource_id,
  c.resource_type,
  c.ecr_repository_name,
  r.registry_id,
  r.repository_uri,
  r.encryption_configuration
from
  aws_inspector2_coverage as c,
  aws_ecr_repository as r
where
  r.repository_name = c.ecr_repository_name
  and c.resource_type = 'AWS_ECR_REPOSITORY';

Get lambda function details of each coverage

select
  c.resource_id,
  c.resource_type,
  c.lambda_function_name,
  f.arn as lambda_function_arn,
  c.lambda_function_runtime,
  f.code_sha_256,
  f.code_size,
  f.kms_key_arn,
  f.package_type
from
  aws_inspector2_coverage as c,
  aws_lambda_function as f
where
  f.name = c.lambda_function_name;

Get EC2 instance details of each coverage

select
  c.resource_id as ec2_instance_id,
  c.resource_type,
  c.ec2_ami_id,
  i.instance_type,
  i.instance_state,
  i.disable_api_termination,
  i.ebs_optimized
from
  aws_inspector2_coverage as c,
  aws_ec2_instance as i
where
  i.instance_id = c.resource_id
  and c.resource_type = 'AWS_EC2_INSTANCE';

.inspect aws_inspector2_coverage

AWS Inspector2 Coverage

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
ec2_ami_id	text	The ID of the Amazon Machine Image (AMI) used to launch the instance.
ec2_instance_tags	jsonb	The tags attached to the instance.
ec2_platform	jsonb	The platform of the instance.
ecr_image_tag	text	Tags associated with the Amazon ECR image metadata.
ecr_image_tags	jsonb	Tags associated with the Amazon ECR image metadata.
ecr_repository_name	text	The name of the Amazon ECR repository.
ecr_repository_scan_frequency	text	The frequency of scans for an object that contains details about the repository an Amazon ECR image resides in.
lambda_function_layers	jsonb	The layers for an AWS Lambda function. A Lambda function can have up to five layers.
lambda_function_name	text	The name of a function.
lambda_function_runtime	text	An AWS Lambda function's runtime.
lambda_function_tags	jsonb	The resource tags on an AWS Lambda function.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text	The AWS Region in which the resource is located.
resource_id	text	The ID of the covered resource.
resource_type	text	The type of the covered resource.
scan_status_code	text	The status code of the scan.
scan_status_reason	text	The reason for the scan.
scan_type	text	The Amazon Inspector scan type covering the resource.
source_account_id	text	The AWS Account ID in which the resource is located.
title	text	Title of the resource.

turbot/aws