Skip to content
This repository was archived by the owner on Jun 6, 2025. It is now read-only.

Commit daaf4fe

Browse files
tas50mm-weber
andcommitted
Update core/mondoo-aws-security.mql.yaml
Co-authored-by: Manuel Weber <112621871+mm-weber@users.noreply.github.com> Signed-off-by: Tim Smith <tim@mondoo.com>
1 parent 3112ac6 commit daaf4fe

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

core/mondoo-aws-security.mql.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -352,9 +352,9 @@ queries:
352352
- uid: mondoo-aws-security-eks-cluster-private-controlplane-terraform-state
353353
filters: asset.platform == "terraform-state"
354354
mql: |
355-
eksState = terraform.state.resources.where(type == "aws_eks_cluster").map(values.vpc_config).first
356-
eksState.contains('endpoint_private_access') && eksState.contains(true)
357-
eksState.contains('endpoint_public_access') && eksState.contains(false)
355+
eksState = terraform.state.resources.where(type == "aws_eks_cluster").map(values.vpc_config).flat
356+
eksState.all(_['endpoint_private_access'] == true)
357+
eksState.all(_['endpoint_public_access'] == false)
358358
359359
- uid: mondoo-aws-security-iam-root-access-key-check
360360
title: Ensure no root user account access key exists

0 commit comments

Comments
 (0)