steampipe plugin install awssteampipe plugin install aws

Table: aws_s3_multi_region_access_point

Amazon S3 Multi-Region Access Point provides a global endpoint that applications can use to fulfill requests from S3 buckets located in multiple AWS Regions. You can use Multi-Region Access Points to build multi-region applications with the same architecture that's used in a single region, and then run those applications anywhere in the world. Instead of sending requests over the congested public internet, Multi-Region Access Points provide built-in network resilience with the acceleration of internet-based requests to Amazon S3.

You must grant the s3:ListAllMyBuckets permission to the user, role, or an IAM entity that makes a request to manage a Multi-Region Access Point.

Examples

Basic info

select
  alias,
  status,
  created_at
from
  aws_s3_multi_region_access_point;

List multi-region access points that do not block public access

select
  name,
  public_access_block ->> 'BlockPublicAcls' as block_public_acls,
  public_access_block ->> 'BlockPublicPolicy' as block_public_policy,
  public_access_block ->> 'IgnorePublicAcls' as ignore_public_acls,
  public_access_block ->> 'RestrictPublicBuckets' as restrict_public_buckets
from
  aws_s3_multi_region_access_point
where
  public_access_block ->> 'BlockPublicAcls' :: text = 'true'
  and public_access_block ->> 'BlockPublicPolicy' :: text = 'true'
  and public_access_block ->> 'IgnorePublicAcls' :: text = 'true'
  and public_access_block ->> 'RestrictPublicBuckets' :: text = 'true';

Get policy details of each multi-region access point

select
  name,
  policy -> 'Established' -> 'Policy' as established_policy,
  policy -> 'Proposed' -> 'Policy' as proposed_policy
from
  aws_s3_multi_region_access_point;

Count the number of multi-region access points per bucket

select
  r ->> 'Bucket' as bucket_name,
  count(name) access_point_count
from
  aws_s3_multi_region_access_point,
  jsonb_array_elements(regions) as r
group by
  bucket_name;

Get bucket details of each multi-region access point

select
  a.name,
  r ->> 'Bucket' as bucket_name,
  b.creation_date as bucket_creation_date,
  b.bucket_policy_is_public,
  b.versioning_enabled
from
  aws_s3_multi_region_access_point as a,
  jsonb_array_elements(a.regions) as r,
  aws_s3_bucket as b
where
  b.name = r ->> 'Bucket';

.inspect aws_s3_multi_region_access_point

AWS S3 Multi Region Access Point

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
alias	text	The alias for the Multi-Region Access Point.
created_at	timestamp with time zone	When the Multi-Region Access Point create request was received.
name	text	The name of the Multi-Region Access Point.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
public_access_block	jsonb	The PublicAccessBlock configuration that you want to apply to this Amazon S3 account.
region	text	The AWS Region in which the resource is located.
regions	jsonb	A collection of the Regions and buckets associated with the Multi-Region Access Point.
status	text	The current status of the Multi-Region Access Point. CREATING and DELETING are temporary states that exist while the request is propagating and being completed.
title	text	Title of the resource.

turbot/aws