steampipe plugin install awssteampipe plugin install aws

Table: aws_inspector_assessment_run

The AWS Inspector Assessment Template resource specifies the Inspector assessment targets that will be evaluated by an assessment run and its related configurations. You use the template to start an assessment run, which is the monitoring and analysis process that results in a set of findings.

Examples

Basic info

select
  name,
  arn,
  assessment_template_arn,
  created_at,
  state,
  region
from
  aws_inspector_assessment_run;

List finding counts by severity

select
  name,
  finding_counts ->> 'High' as high,
  finding_counts ->> 'Low' as low,
  finding_counts ->> 'Medium' as medium,
  finding_counts ->> 'Informational' as informational,
  state
from
  aws_inspector_assessment_run;

List assessment runs for each assessment template

select
  t.name as assessment_template_name,
  r.name as assessment_run_name,
  r.created_at as assessment_run_created_at,
  r.state,
  r.region
from
  aws_inspector_assessment_run as r,
  aws_inspector_assessment_template as t
where
  r.assessment_template_arn = t.arn;

List assessment runs which are not completed

select
  name,
  arn,
  assessment_template_arn,
  created_at,
  state,
  region
from
  aws_inspector_assessment_run
where
  state <> 'COMPLETED';

List state changes for each assessment run

select
  name,
  arn,
  state,
  jsonb_pretty(state_changes) as state_changes
from
  aws_inspector_assessment_run;

List assessment runs in the last 7 days

select
  name,
  arn,
  assessment_template_arn,
  created_at,
  state,
  region
from
  aws_inspector_assessment_run
where
  created_at >= (now() - interval '7' day);

.inspect aws_inspector_assessment_run

AWS Inspector Assessment Run

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
arn	text	The ARN of the assessment run.
assessment_template_arn	text	The ARN of the assessment template that is associated with the assessment run.
completed_at	timestamp with time zone	The assessment run completion time that corresponds to the rules packages evaluation completion time or failure.
created_at	timestamp with time zone	The time when StartAssessmentRun was called.
data_collected	boolean	Boolean value (true or false) that specifies whether the process of collecting data from the agents is completed.
duration_in_seconds	bigint	The duration of the assessment run.
finding_counts	jsonb	Provides a total count of generated findings per severity.
name	text	The auto-generated name for the assessment run.
notifications	jsonb	A list of notifications for the event subscriptions.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text	The AWS Region in which the resource is located.
rules_package_arns	jsonb	The rules packages selected for the assessment run.
started_at	timestamp with time zone	The time when StartAssessmentRun was called.
state	text	The state of the assessment run.
state_changed_at	timestamp with time zone	The last time when the assessment run's state changed.
state_changes	jsonb	A list of the assessment run state changes.
title	text	Title of the resource.
user_attributes_for_findings	jsonb	The user-defined attributes that are assigned to every generated finding.

turbot/aws