Bug fixes
- Renamed
steampipe.spvars.example
files topowerpipe.ppvars.example
and updated documentation.
Bug fixes
- Removed the
powerpipe.ppvars
file. (#47)
Powerpipe
Powerpipe is now the preferred way to run this mod! Migrating from Steampipe →
All v0.x versions of this mod will work in both Steampipe and Powerpipe, but v1.0.0 onwards will be in Powerpipe format only.
Enhancements
- Focus documentation on Powerpipe commands.
- Show how to combine Powerpipe mods with Steampipe plugins.
Breaking changes
- Updated the plugin dependency section of the mod to use
min_version
instead ofversion
. (#41)
Bug fixes
- Fixed the
untagged
benchmark to correctly check if resources have tags or not. (#37) (Thanks @brad-webb for the contribution!!) - Fixed the
expected_tag_values
benchmark to skip resources where either tags are not set or there are no matching tag keys. (#33)
What's new?
- Added the Expected Tag Values benchmark (
steampipe check benchmark.expected_tag_values
), which allows users to check if tags with specific keys are using allowed values. (#27) (Thanks to @rinzool for the new benchmark!)
Dependencies
- AWS plugin
v0.81.0
or higher is now required.
What's new?
- Added
tags
as dimensions to group and filter findings. (see var.tag_dimensions) (#25) - Added
connection_name
in the common dimensions to group and filter findings. (see var.common_dimensions) (#25)
Enhancements
- Updated the queries of
Untagged
benchmark (steampipe check benchmark.untagged
) controls to also check if the value of thetags
column is{}
besides checking fornull
. (#20)
Breaking changes
- Removed the following controls as they're redundant with all other controls:
tagging_resource_mandatory
tagging_resource_prohibited
tagging_resource_tag_limit
tagging_resource_untagged
Enhancements
- Updated docs/index.md and README with new dashboard screenshots and latest format. (#16)
Enhancements
- Added
category
,service
, andtype
tags to benchmarks. (#13)
What's new?
- Added default values to all variables (set to the same values in
steampipe.spvars.example
) - Added
*.spvars
and*.auto.spvars
files to.gitignore
- Renamed
steampipe.spvars
tosteampipe.spvars.example
, so the variable default values will be used initially. To use this example file instead, copysteampipe.spvars.example
as a new filesteampipe.spvars
, and then modify the variable values in it. For more information on how to set variable values, please see Input Variable Configuration.
Enhancements
README.md
anddocs/index.md
files now include the console output image
What's new?
New control types:
- Untagged: Find resources with no tag.
- Prohibited: Find prohibited tag names.
- Mandatory: Ensure mandatory tags are set.
- Limit: Detect when the tag limit is nearly met.
For 71 resource types:
- accessanalyzer_analyzer
- api_gateway_stage
- cloudfront_distribution
- cloudtrail_trail
- cloudwatch_alarm
- cloudwatch_log_group
- codebuild_project
- codecommit_repository
- codepipeline_pipeline
- config_rule
- dax_cluster
- directory_service_directory
- dms_replication_instance
- dynamodb_table
- ebs_snapshot
- ebs_volume
- ec2_application_load_balancer
- ec2_classic_load_balancer
- ec2_gateway_load_balancer
- ec2_instance
- ec2_network_load_balancer
- ec2_reserved_instance
- ecr_repository
- ecs_container_instance
- ecs_service
- efs_file_system
- eks_addon
- eks_cluster
- eks_identity_provider_config
- elastic_beanstalk_application
- elastic_beanstalk_environment
- elasticache_cluster
- elasticsearch_domain
- eventbridge_rule
- guardduty_detector
- iam_role
- iam_server_certificate
- iam_user
- inspector_assessment_template
- kinesis_firehose_delivery_stream
- kms_key
- lambda_function
- rds_db_cluster
- rds_db_cluster_parameter_group
- rds_db_cluster_snapshot
- rds_db_instance
- rds_db_option_group
- rds_db_parameter_group
- rds_db_snapshot
- rds_db_subnet_group
- redshift_cluster
- route53_domain
- route53_resolver_endpoint
- s3_bucket
- sagemaker_endpoint_configuration
- sagemaker_model
- sagemaker_notebook_instance
- sagemaker_training_job
- secretsmanager_secret
- ssm_parameter
- tagging_resource
- vpc
- vpc_eip
- vpc_nat_gateway
- vpc_network_acl
- vpc_security_group
- vpc_vpn_connection
- wafv2_ip_set
- wafv2_regex_pattern_set
- wafv2_rule_group
- wafv2_web_acl