steampipe plugin install awssteampipe plugin install aws

Table: aws_vpc_endpoint_service

A VPC endpoint enables you to privately connect your VPC to supported AWS services and VPC endpoint services powered by AWS PrivateLink without requiring an internet gateway, NAT device, VPN connection, or AWS Direct Connect connection.

Examples

Basic info

select
  service_name,
  service_id,
  base_endpoint_dns_names,
  private_dns_name
from
  aws_vpc_endpoint_service;

Get availability zone count for each VPC endpoint service

select
  service_name,
  jsonb_array_length(availability_zones) as availability_zone_count
from
  aws_vpc_endpoint_service;

Get DNS information for each VPC endpoint service

select
  service_name,
  service_id,
  base_endpoint_dns_names,
  private_dns_name
from
  aws_vpc_endpoint_service;

List VPC endpoint services with their corresponding service types

select
  service_name,
  service_id,
  type ->> 'ServiceType' as service_type
from
  aws_vpc_endpoint_service
  cross join jsonb_array_elements(service_type) as type;

List VPC endpoint services which do not support endpoint policies

select
  service_name,
  service_id,
  vpc_endpoint_policy_supported
from
  aws_vpc_endpoint_service
where
  not vpc_endpoint_policy_supported;

List allowed principals for each VPC endpoint services

select
  service_name,
  service_id,
  jsonb_pretty(vpc_endpoint_service_permissions) as allowed_principals
from
  aws_vpc_endpoint_service;

Get VPC endpoint connection info for each VPC endpoint service

select
  service_name,
  service_id,
  c ->> 'VpcEndpointId' as vpc_endpoint_id,
  c ->> 'VpcEndpointOwner' as vpc_endpoint_owner,
  c ->> 'VpcEndpointState' as vpc_endpoint_state,
  jsonb_array_elements_text(c -> 'NetworkLoadBalancerArns') as network_loadBalancer_arns
from
  aws_vpc_endpoint_service,
  jsonb_array_elements(vpc_endpoint_connections) as c

.inspect aws_vpc_endpoint_service

AWS VPC Endpoint Service

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
acceptance_required	boolean	Indicates whether VPC endpoint connection requests to the service must be accepted by the service owner.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
availability_zones	jsonb	The Availability Zones in which the service is available.
base_endpoint_dns_names	jsonb	The DNS names for the service.
manages_vpc_endpoints	boolean	Indicates whether the service manages its VPC endpoints. Management of the service VPC endpoints using the VPC endpoint API is restricted.
owner	text	The AWS account ID of the service owner.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
private_dns_name	text	The private DNS name for the service.
private_dns_name_verification_state	text	The verification state of the VPC endpoint service. Consumers of the endpoint service cannot use the private name when the state is not verified.
region	text	The AWS Region in which the resource is located.
service_id	text	The ID of the endpoint service.
service_name	text	The Amazon Resource Name (ARN) of the service.
service_type	jsonb	The type of service.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tags assigned to the service.
title	text	Title of the resource.
vpc_endpoint_connections	jsonb	Information about one or more VPC endpoint connections.
vpc_endpoint_policy_supported	boolean	Indicates whether the service supports endpoint policies.
vpc_endpoint_service_permissions	jsonb	Information about one or more allowed principals.

turbot/aws