steampipe plugin install aws

Table: aws_inspector_assessment_target - Query AWS Inspector Assessment Targets using SQL

The AWS Inspector Assessment Target is a part of the AWS Inspector service, which is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Assessment Targets are specifically used in AWS Inspector to define the Amazon EC2 instances that are included in the assessment. They help in identifying potential security issues, vulnerabilities, or deviations from best practices.

Table Usage Guide

The aws_inspector_assessment_target table in Steampipe provides you with information about assessment targets within AWS Inspector. This table allows you, as a DevOps engineer, to query target-specific details, including ARN, name, and associated resource group ARN. You can utilize this table to gather insights on assessment targets, such as their creation time, last updated time, and more. The schema outlines the various attributes of the assessment target for you, including the target ARN, creation date, and associated tags.

Examples

Basic info

Explore which AWS Inspector Assessment Targets are available and when they were created or updated. This query is useful for monitoring changes and managing resources across different AWS regions.

select
name,
arn,
resource_group_arn,
created_at,
updated_at,
region
from
aws_inspector_assessment_target;
select
name,
arn,
resource_group_arn,
created_at,
updated_at,
region
from
aws_inspector_assessment_target;

List assessment targets created within the last 7 days

Identify recently created assessment targets within the past week to stay updated on new additions in the AWS Inspector service. This can help in monitoring and managing your resources effectively.

select
name,
arn,
resource_group_arn,
created_at,
updated_at,
region
from
aws_inspector_assessment_target
where
created_at > (current_date - interval '7' day);
select
name,
arn,
resource_group_arn,
created_at,
updated_at,
region
from
aws_inspector_assessment_target
where
created_at > date('now', '-7 day');

List assessment targets that were updated after creation

Discover the segments that have undergone changes since their initial creation in the AWS Inspector service. This is useful for tracking modifications and ensuring that updates have been successfully implemented.

select
name,
arn,
resource_group_arn,
created_at,
updated_at,
region
from
aws_inspector_assessment_target
where
created_at != updated_at;
select
name,
arn,
resource_group_arn,
created_at,
updated_at,
region
from
aws_inspector_assessment_target
where
created_at <> updated_at;

Schema for aws_inspector_assessment_target

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form, e.g. connection_name.
account_idtextThe AWS Account ID in which the resource is located.
akasjsonbArray of globally unique identifier strings (also known as) for the resource.
arntext=The ARN that specifies the Amazon Inspector assessment target.
created_attimestamp with time zoneThe time at which the assessment target is created.
nametextThe name of the Amazon Inspector assessment target.
partitiontextThe AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
regiontextThe AWS Region in which the resource is located.
resource_group_arntextThe ARN that specifies the resource group that is associated with the assessment target.
titletextTitle of the resource.
updated_attimestamp with time zoneThe time at which UpdateAssessmentTarget is called.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- aws

You can pass the configuration to the command with the --config argument:

steampipe_export_aws --config '<your_config>' aws_inspector_assessment_target