Pipes
Guardrails
Open Source
Blog
About
Get Started →
Start →
How To
5 key questions to analyze your AWS CloudTrail logs
Quickly surface potential privilege misuse or elevated access patterns in your environment - no SIEM required.
Matty Stratton
Mar 26, 2025
How To
ServiceNow CMDB CI relationship sync: faster, more complete
Automatically create asset relationships in ServiceNow CMDB for AWS, Azure, GCP...
Turbot Team
Oct 21, 2024
How To
Automated cloud discovery into ServiceNow import sets
Automate cloud discovery from AWS, Azure, GCP and Kubernetes into ServiceNow im...
Turbot Team
Jul 22, 2024
How To
Get to green with real-time remediation for Azure CIS v2.0.0
Turn your Azure CIS Benchmark green with auto-remediation guardrails to comply ...
Turbot Team
Jul 22, 2024
How To
Get to green with real-time remediation for GCP CIS v2.0.0
Turn your GCP CIS Benchmark green with auto-remediation guardrails to comply wi...
Turbot Team
Jul 22, 2024
How To
Use files, branches, or tags for mod dependencies
Install a mod dependency locally, iterate on it rapidly, then share it to other...
Turbot Team
May 16, 2024
How To
Get to green with real-time remediation for AWS CIS v3.0.0
Turn your AWS CIS Benchmark green with auto-remediation guardrails to comply wi...
Turbot Team
May 15, 2024
How To
Real-time AWS v3.0.0 CIS Benchmark assessments
Assess your security posture with automated AWS CIS v3.0.0 assessments that pro...
Turbot Team
May 15, 2024
How To
Real-time Azure v2.0.0 CIS Benchmark assessments
Assess your security posture with automated Azure CIS v2.0.0 assessments that p...
Turbot Team
May 15, 2024
How To
Real-time GCP v2.0.0 CIS Benchmark assessments
Assess your security posture with automated GCP CIS v2.0.0 assessments that pro...
Turbot Team
May 15, 2024
How To
Kubernetes Security Posture Management
Detect and respond to Kubernetes configuration drift in real-time with Guardrai...
Turbot Team
May 14, 2024
How To
Real-time Kubernetes discovery for ServiceNow CMDB
Automated ServiceNow Kubernetes discovery via Turbot Guardrails provides compre...
Turbot Team
May 14, 2024
How To
Migrating from Steampipe to Powerpipe
Play your favorite Steampipe hits, and enjoy some new ones.
Turbot Team
Mar 06, 2024
How To
Automated GCP discovery to ServiceNow CMDB
Automated ServiceNow GCP discovery via Turbot Guardrails provides comprehensive...
Turbot Team
Mar 04, 2024
How To
Automated Azure discovery to ServiceNow CMDB
Automated ServiceNow Azure discovery via Turbot Guardrails provides comprehensi...
Turbot Team
Mar 04, 2024
How To
Free automated AWS CIS v3.0 assessments
Instantly check compliance to the latest AWS CIS benchmark in an always-free Tu...
Turbot Team
Feb 08, 2024
How To
Turbot Pipes as a software component
Why, and how, to call Turbot Pipes from any programming language.
Turbot Team
Jan 26, 2024
How To
Automated AWS discovery to ServiceNow CMDB
Automated ServiceNow AWS discovery via Turbot Guardrails provides comprehensive...
Turbot Team
Jan 18, 2024
How To
Build a Top 10 mod
Here's how to build a mod to check the top 10 AWS security tips. You can use th...
Steampipe Team
Jul 18, 2023
How To
Customization guide for the AWS Well Architected Mod: Part 2
Learn how to add support for a new pillar, Sustainability, using a custom contr...
Steampipe Team
Jul 12, 2023
How To
Customization guide for the AWS Well Architected Mod: Part 1
Learn how to add support for a new pillar, Sustainability, using controls cherr...
Steampipe Team
Jun 08, 2023
How To
Aggregating connections in Turbot Pipes
In a workspace, all connections of the same type are automatically aggregated. ...
Turbot Team
May 10, 2023
How To
Accelerate your AWS Well-Architected assessments with Steampipe
Now consulting partners can more effectively run assessments, customize their r...
Bob Tordella
Apr 25, 2023
How To
Prevent unsecure devices from joining your network
Use Steampipe to join data from Vanta and Tailscale to enforce workstation secu...
Bob Tordella
Apr 21, 2023
How To
Cloud resource tagging strategies for your organization
Ensuring compliance, conformance, and accuracy in your organization's tagging p...
Chris Farris
Apr 14, 2023
How To
Tackling Third-Party Risks in your AWS Environment
Learn to identify 3rd party access to Amazon Machine Images (AMIs) and IAM cros...
Chris Farris
Apr 12, 2023
How To
Streamlining access to crucial business insights
Learn how to reuse data and make it accessible to your entire organization usin...
Bob Tordella
Mar 27, 2023
How To
Add context to your cloud multi-account reports
Custom names and tags make benchmark results easier to read, filter, and organi...
Steampipe Team
Mar 24, 2023
How To
Secure your Terraform deployments in AWS
Use Steampipe with AWS CodePipeline & CodeBuild to validate your Terraform code...
Chris Farris
Mar 15, 2023
How To
Limit lifetime of GCP IAM service account keys
By default GCP IAM service account keys never expire. Use Steampipe to find exp...
Steampipe Team
Mar 13, 2023
How To
Snapshot, share, and schedule queries in Turbot Pipes
You could already schedule periodic snapshots of benchmarks and dashboards. Now...
Turbot Team
Mar 08, 2023
How To
Snapshot, share, and schedule queries in Turbot Pipes
You could already schedule periodic snapshots of benchmarks and dashboards. Now...
Turbot Team
Mar 08, 2023
How To
20 automations to reduce cloud spend in 2023
How to use Turbot Guardrails to find operational cost savings.
David Boeke
Mar 08, 2023
How To
Uncovering Attack Paths with Cloud Resource Graphs
Leveraging Steampipe's Relationship Graphs for Penetration Testing in GCP
Chris Farris
Mar 03, 2023
How To
Schedule snapshots of benchmarks and dashboards in Turbot Pipes
To track changes over time it's helpful to run snapshots periodically. Now you ...
Turbot Team
Feb 13, 2023
How To
Schedule snapshots of benchmarks and dashboards in Turbot Pipes
To track changes over time it's helpful to run snapshots periodically. Now you ...
Turbot Team
Feb 13, 2023
How To
Reuse and remix Steampipe benchmarks and dashboards
The Steampipe ecosystem provides thousands of named resources you can include i...
Jon Udell
Feb 07, 2023
How To
Find which secrets you still need to rotate in your CircleCI environment
Using Steampipe’s CircleCI plugin, you can query your project environment varia...
Chris Farris
Jan 31, 2023
How To
How Steampipe translates SQL queries to API calls
A Steampipe plugin can map a Postgres WHERE clause to an API parameter. We took...
Jon Udell
Jan 26, 2023
How To
Streamlining incident response investigations with Steampipe relationship graphs
Quickly visualize and identify attack paths an attacker could leverage. Relatio...
Chris Farris
Jan 19, 2023
How To
Mapping your AWS attack surface
To improve your application security program, chart the attack surface of your ...
Chris Farris
Dec 19, 2022
How To
Why build an HTTP client into a database? So you can ingest web data directly!
When there isn't a Steampipe plugin to meet your need, the Net plugin's net_htt...
Jon Udell
Dec 08, 2022
How To
NIST 800-53 controls
Evaluate NIST 800-53 compliance for all your AWS accounts.
Turbot Team
Nov 28, 2022
How To
Steampipe as software component
Why, and how, to call Steampipe from any programming language.
Jon Udell
Oct 27, 2022
How To
Save and share Turbot Pipes benchmarks and dashboards
Capture full-fidelity snapshots, then share them with others.
Jon Udell
Oct 19, 2022
How To
Save and share Steampipe Cloud benchmarks and dashboards
Capture full-fidelity snapshots, then share them with others.
Jon Udell
Oct 19, 2022
How To
Enrich Splunk events with Steampipe
Splunk lookup tables can enrich AWS event data with IP-address/name mappings no...
Chris Farris
Oct 18, 2022
How To
View dashboards and run benchmarks in Turbot Pipes
It's a few clicks to install mods that use connections in your workspace.
Turbot Team
Sep 06, 2022
How To
View dashboards and run benchmarks in Steampipe Cloud
It's a few clicks to install mods that use connections in your workspace.
Steampipe Team
Sep 06, 2022
How To
HIPAA compliance controls
Evaluate HIPAA compliance for all your AWS accounts.
Bob Tordella
Jun 30, 2022
How To
Top 7 AWS cost-saving strategies
How to save big in AWS by cleaning up your underused resources, stale data, and...
Bob Tordella
May 05, 2022
How To
PCI compliance controls
Evaluate PCI DSS version 3.2.1 compliance for all your AWS accounts.
Bob Tordella
Apr 29, 2022
How To
Use Steampipe to identify cost savings in AWS
An introduction to AWS Thrifty, a mod that finds underutilized AWS resources.
Jon Udell
Mar 31, 2022
How To
SQL for Google Sheets
Use the Google Sheets plugin to join spreadsheets with other tables, enforce na...
Jon Udell
Mar 30, 2022
How To
SQL queries + compliance checks for Terraform files
Steampipe's Terraform plugin makes your .tf files queryable with SQL. A trio of...
Jon Udell
Feb 21, 2022
How To
Using SQL to check spreadsheet integrity
The CSV plugin brings spreadsheet data to Steampipe. We show how to write compl...
Jon Udell
Nov 03, 2021
How To
When not to SELECT *
Steampipe can combine results from primary and subsidiary API calls. But when y...
Jon Udell
Oct 28, 2021
How To
A portrait of VSCode's external contributors
We build a data analysis pipeline to explore large GitHub repos. The same metho...
Jon Udell
Oct 26, 2021
How To
Using Steampipe's GitHub plugin to connect with your open source community
Review stale issues, visualize release cadence, and find external contributors
Jon Udell
Oct 04, 2021
How To
Adding a column to a Steampipe table
A small tweak to the GitHub plugin unlocks new capability
Jon Udell
Sep 19, 2021
How To
Automated EBS encryption
Automate EBS default encryption for all AWS accounts and regions.
Bob Tordella
Jul 21, 2021
How To
Well-Architected automation
Automating the AWS Well-Architected Tool across your entire environment.
Bob Tordella
Jul 13, 2021
How To
ECR vulnerability scanning
Automate vulnerability scanning in all your ECR repositories.
Turbot Team
Jun 24, 2021
How To
Managing default routes '0.0.0.0/0'
How to manage security group rules for public facing accounts.
Turbot Team
Jun 21, 2021
How To
Custom CMDB data
Import your org's custom reference data into the Turbot Guardrails CMDB.
Turbot Team
Jun 15, 2021
How To
S3 bucket logging
Automate server access logging on your S3 buckets.
Turbot Team
Jun 07, 2021
How To
Encryption at rest for SNS
How to enforce encryption at rest to all your Amazon SNS topics.
Turbot Team
May 31, 2021
How To
DynamoDB table backup
Automatically enable continuous backups with point-in-time recovery of your Dyn...
Turbot Team
May 24, 2021
How To
Tagging with context
Automate application of resource tags from CMDB metadata.
Bob Tordella
May 18, 2021
How To
S3 public access blocks
Automate AWS S3 account and bucket level public access blocks.
Bob Tordella
May 18, 2021
How To
GCP firewall rule logging
Automatically enable GCP Firewall Logging for one or more firewall rules.
Bob Tordella
May 03, 2021
How To
Automated snapshot cleanup
How to save big by cleaning up older snapshots on a retention schedule.
Bob Tordella
Apr 26, 2021
How To
Enabling KMS key rotation
How to automatically enable CMK rotation for all of your AWS accounts.
Bob Tordella
Apr 20, 2021
How To
Azure Storage public access controls
How to disable public access for Azure storage accounts, containers and blobs.
Bob Tordella
Apr 12, 2021
How To
EC2 termination protection
Protect your Amazon EC2 Instances from accidental termination.
Bob Tordella
Apr 05, 2021
How To
Blocking project-wide SSH keys
How to block project-wide SSH keys from accessing your GCP Compute Instances
Bob Tordella
Mar 30, 2021
How To
Cleanup unwanted internet gateways
Remove VPC resources that are not used in your network topology.
Bob Tordella
Mar 22, 2021
How To
Elastic IP cleanup
How to automatically clean up older, unattached and unneeded VPC EIPs.
Bob Tordella
Mar 16, 2021
How To
Encryption in transit for S3 buckets
How to enforce all access to Amazon S3 to be encrypted with TLS.
Bob Tordella
Mar 08, 2021
How To
Automating VPC flow logs
Automatically enable AWS VPC Flow Logs for every VPC in under 2 minutes.
Bob Tordella
Mar 01, 2021
How To
Automatic deletion of default VPCs
Automate default VPC removal to reduce risk.
Bob Tordella
Feb 22, 2021
How To
IAM access keys, a turn for the better.
Increase your AWS account security by cleaning up expired and unused credential...
Bob Tordella
Feb 17, 2021
How To
The Hitchhiker's Guide to IAM Policy Wildcards
A quick reference to AWS IAM wildcard usage.
David Boeke
Feb 17, 2021
How To
Top 10 Checks: IAM Credential Report
Learn how to generate and check your AWS IAM Credential Report for root account...
David Boeke
Feb 09, 2021
How To
Unattached storage volume cleanup
How to save big, by cleaning up older, unattached and unneeded block storage.
Bob Tordella
Feb 03, 2021
How To
Instance metadata service best practices
Learn how to automate enforcement of the more secure IMDSv2 standard.
Bob Tordella
Jan 27, 2021
How To
Monitor compliance of the AWS CIS 1.15 benchmark.
Ensure IAM users only receive permissions via groups.
David Boeke
Jan 25, 2021
How To
Corral your untagged cloud cattle
How to quickly find cloud resources that are missing tags
David Boeke
Jan 22, 2021
How To
Cost savings
How to save big, by turning off workloads when not in use.
Bob Tordella
Jan 20, 2021
How To
Guardrails for tagging
Automating resource owner tags.
Bob Tordella
Jan 14, 2021
How To
AWS Well-Architected Tool workloads + Turbot Guardrails governance controls
Turbot Guardrails new AWS Well-Architected Tool API integration builds upon Tur...
Turbot Team
Dec 16, 2020
How To
AWS Outposts + Turbot Guardrails governance controls
Turbot Guardrails AWS Outposts integration extends our existing CMDB, Policy an...
Turbot Team
Aug 20, 2020
How To
Turbot Guardrails Azure demo
A demo of Turbot Guardrails console and Azure governance controls
Turbot Team
Jul 06, 2020
How To
Turbot Guardrails Terraform provider
Overview and Demo of Turbot Guardrails Terraform Provider
Turbot Team
Jul 05, 2020
How To
Turbot Guardrails GCP demo
A demo of Turbot Guardrails console and GCP governance controls
Turbot Team
Mar 31, 2020
How To
Turbot Guardrails AWS demo
A demo of Turbot Guardrails console and AWS governance controls
Turbot Team
Mar 31, 2020
How To
Turbot Guardrails overview
An overview of Turbot Guardrails features & capabilities.
Turbot Team
Jan 03, 2020
How To
AWS Mumbai 2019 - governance for the Cloud Age
Watch our talk at AWS Mumbai on Cloud Governance
Turbot Team
Sep 13, 2019
How To
AWS Sydney 2019 - governance for the Cloud Age
Learn how Turbot Guardrails defines cloud governance and explains it's roles in...
Turbot Team
Sep 13, 2019
How To
Turbot supports compliance for GDPR
With the May 25th deadline for GDPR compliance rapidly approaching, Turbot Guar...
Turbot Team
Apr 18, 2018
How To
Turbot custom resources in CloudFormation
Turbot Guardrails Resources can be managed as Custom Resources in CloudFormatio...
Turbot Team
Apr 10, 2018
How To
Linux UID & GID synchronization
Maintaining a consistent UID for Linux users across servers both on-premise and...
Turbot Team
Mar 21, 2018
How To
Use resource groups to apply policies across the hierarchy
Resource Groups allow resources from different areas of the resource tree to be...
Turbot Team
Mar 08, 2018
How To
Turbot reaches 1,000 guardrails
Turbot, the world leader in Software Defined Operations, is constantly building...
Turbot Team
Mar 02, 2018
How To
AWS re:Invent 2017 wrap up
AWS re:Invent was bigger than ever in 2017. 40,000+ attendees made this an insp...
Turbot Team
Dec 05, 2017
How To
Zero to enterprise, your first 100 automations for compliance, security and operations.
Watch Turbot's re-invent talk on how to rapidly enable security, compliance and...
Turbot Team
Nov 30, 2017
How To
Turbot adds support for new AWS S3 default encryption
This month, Amazon announced the availability of S3 default encryption. To furt...
Turbot Team
Nov 26, 2017
How To
Automate enforcement policies to secure and protect your S3 buckets
We are often asked by potential customers how Turbot Guardrails can help implem...
Turbot Team
Oct 18, 2017
How To
New: Automated cloud configuration management database (Cloud CMDB)
Many organizations face huge legal and technical challenges in arranging for ho...
Turbot Team
May 11, 2017
How To
New: Guardrails for Elastic Block Storage volumes
Costs for AWS Elastic Block Storage (EBS) volumes can spiral if an unused EBS v...
Turbot Team
Mar 07, 2017
How To
New! EC2 instance scheduling
Turbot Guardrails new Instance Scheduling feature gives your cloud team the pow...
Turbot Team
Feb 07, 2017
How To
Turbot account tags
Turbot Guardrails new metadata tagging model provides yet another level of capa...
Turbot Team
Jan 06, 2017
How To
Option inheritence
Turbot Inherit & Turbot Include make maintaining lists of option settings in Tu...
Turbot Team
Jan 03, 2017
How To
Managing controls for custom EC2 AMIs across multiple AWS accounts
Turbot Guardrails supports sharing local AMIs with other accounts and launching...
Turbot Team
Jul 28, 2016
How To
Guardrails for CfnCluster
Turbot Guardrails now fully supports CfnCluster ('CloudFormation cluster'), a f...
Turbot Team
Jul 20, 2016
How To
Continuous adherence to NIST 800-53 controls for cloud infrastructure
Many customers use Turbot Guardrails enterprise to ensure continuous security a...
Turbot Team
Jul 12, 2016
How To
S3 bucket policies - support for custom policies and guardrails
Turbot Guardrails now supports custom S3 bucket policies and has added new guar...
Turbot Team
May 20, 2016
Join us on Slack→
