Bug fixes
- Renamed
steampipe.spvars.examplefiles topowerpipe.ppvars.exampleand updated documentation.
Bug fixes
- Removed the
powerpipe.ppvarsfile. (#47)
Powerpipe
Powerpipe is now the preferred way to run this mod! Migrating from Steampipe →
All v0.x versions of this mod will work in both Steampipe and Powerpipe, but v1.0.0 onwards will be in Powerpipe format only.
Enhancements
- Focus documentation on Powerpipe commands.
- Show how to combine Powerpipe mods with Steampipe plugins.
Breaking changes
- Updated the plugin dependency section of the mod to use
min_versioninstead ofversion. (#41)
Bug fixes
- Fixed the
untaggedbenchmark to correctly check if resources have tags or not. (#37) (Thanks @brad-webb for the contribution!!) - Fixed the
expected_tag_valuesbenchmark to skip resources where either tags are not set or there are no matching tag keys. (#33)
What's new?
- Added the Expected Tag Values benchmark (
steampipe check benchmark.expected_tag_values), which allows users to check if tags with specific keys are using allowed values. (#27) (Thanks to @rinzool for the new benchmark!)
Dependencies
- AWS plugin
v0.81.0or higher is now required.
What's new?
- Added
tagsas dimensions to group and filter findings. (see var.tag_dimensions) (#25) - Added
connection_namein the common dimensions to group and filter findings. (see var.common_dimensions) (#25)
Enhancements
- Updated the queries of
Untaggedbenchmark (steampipe check benchmark.untagged) controls to also check if the value of thetagscolumn is{}besides checking fornull. (#20)
Breaking changes
- Removed the following controls as they're redundant with all other controls:
tagging_resource_mandatorytagging_resource_prohibitedtagging_resource_tag_limittagging_resource_untagged
Enhancements
- Updated docs/index.md and README with new dashboard screenshots and latest format. (#16)
Enhancements
- Added
category,service, andtypetags to benchmarks. (#13)
What's new?
- Added default values to all variables (set to the same values in
steampipe.spvars.example) - Added
*.spvarsand*.auto.spvarsfiles to.gitignore - Renamed
steampipe.spvarstosteampipe.spvars.example, so the variable default values will be used initially. To use this example file instead, copysteampipe.spvars.exampleas a new filesteampipe.spvars, and then modify the variable values in it. For more information on how to set variable values, please see Input Variable Configuration.
Enhancements
README.mdanddocs/index.mdfiles now include the console output image
What's new?
New control types:
- Untagged: Find resources with no tag.
- Prohibited: Find prohibited tag names.
- Mandatory: Ensure mandatory tags are set.
- Limit: Detect when the tag limit is nearly met.
For 71 resource types:
- accessanalyzer_analyzer
- api_gateway_stage
- cloudfront_distribution
- cloudtrail_trail
- cloudwatch_alarm
- cloudwatch_log_group
- codebuild_project
- codecommit_repository
- codepipeline_pipeline
- config_rule
- dax_cluster
- directory_service_directory
- dms_replication_instance
- dynamodb_table
- ebs_snapshot
- ebs_volume
- ec2_application_load_balancer
- ec2_classic_load_balancer
- ec2_gateway_load_balancer
- ec2_instance
- ec2_network_load_balancer
- ec2_reserved_instance
- ecr_repository
- ecs_container_instance
- ecs_service
- efs_file_system
- eks_addon
- eks_cluster
- eks_identity_provider_config
- elastic_beanstalk_application
- elastic_beanstalk_environment
- elasticache_cluster
- elasticsearch_domain
- eventbridge_rule
- guardduty_detector
- iam_role
- iam_server_certificate
- iam_user
- inspector_assessment_template
- kinesis_firehose_delivery_stream
- kms_key
- lambda_function
- rds_db_cluster
- rds_db_cluster_parameter_group
- rds_db_cluster_snapshot
- rds_db_instance
- rds_db_option_group
- rds_db_parameter_group
- rds_db_snapshot
- rds_db_subnet_group
- redshift_cluster
- route53_domain
- route53_resolver_endpoint
- s3_bucket
- sagemaker_endpoint_configuration
- sagemaker_model
- sagemaker_notebook_instance
- sagemaker_training_job
- secretsmanager_secret
- ssm_parameter
- tagging_resource
- vpc
- vpc_eip
- vpc_nat_gateway
- vpc_network_acl
- vpc_security_group
- vpc_vpn_connection
- wafv2_ip_set
- wafv2_regex_pattern_set
- wafv2_rule_group
- wafv2_web_acl