Table: aws_shield_subscription - Query AWS Shield Advanced Subscription using SQL

AWS Shield Advanced is a DDoS protection service from AWS. For a monthly fee, Shield Advanced will protect your AWS resources against Distributed Denial of Service (DDoS) attacks.

Table Usage Guide

The aws_shield_subscription table in Steampipe allows you to query the current status of the AWS Shield Advanced Subscription of your account. This table provides you with insights into the start and end date of your subscription, the subscription limits or the status of the proactive engagement of the Shield Response Team. For more information about the individual fields, please refer to the AWS Shield Advanced API documentation.

Examples

Basic info

select
  subscription_state,
  start_time,
  end_time,
  auto_renew,
  proactive_engagement_status
from
  aws_shield_subscription;

select
  subscription_state,
  start_time,
  end_time,
  auto_renew,
  proactive_engagement_status
from
  aws_shield_subscription;

Check if the subscription is active and proactive engagement is enabled

select
  subscription_state,
  proactive_engagement_status
from
  aws_shield_subscription
where
  state = 'ACTIVE'
  and proactive_engagement_status = 'ENABLED';

select
  subscription_state,
  proactive_engagement_status
from
  aws_shield_subscription
where
  state = 'ACTIVE'
  and proactive_engagement_status = 'ENABLED';

Schema for aws_shield_subscription

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
account_id	text	=, !=, ~~, ~~, !~~, !~~	The AWS Account ID in which the resource is located.
akas	jsonb		Array of globally unique identifier strings (also known as) for the resource.
arn	text		The ARN (Amazon Resource Name) of the subscription.
auto_renew	text		If ENABLED, the subscription will be automatically renewed at the end of the existing subscription period.
end_time	timestamp with time zone		The date and time your subscription will end.
limits	jsonb		Specifies how many protections of a given type you can create.
partition	text		The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
proactive_engagement_status	text		Status of the proactive engagement of the Shield Response Team (SRT). Indicates if the Shield Response Team (SRT) will use the Shield emergency contact data to notify them about DDoS attacks.
region	text		The AWS Region in which the resource is located.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
start_time	timestamp with time zone		The start time of the subscription.
subscription_limits	jsonb		The configured limits for your subscription.
subscription_state	text		The current state the subscription.
time_commitment_in_seconds	bigint		The length, in seconds, of the Shield Advanced subscription for the account.
title	text		Title of the resource.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- aws

You can pass the configuration to the command with the --config argument:

steampipe_export_aws --config '<your_config>' aws_shield_subscription