# Queries & Insights **URL:** https://community.cloudquery.io/c/queries/11.md [Latest](https://community.cloudquery.io/latest.md) · [Categories](https://community.cloudquery.io/categories.md) · [Tags](https://community.cloudquery.io/tags.md) --- ## [About the Queries & Insights category](https://community.cloudquery.io/t/about-the-queries-insights-category/1208)
**Author:** [@stefan](https://community.cloudquery.io/u/stefan)\ **Replies:** 0\ **Last updated:** [August 5, 2025, 7:45am UTC](https://community.cloudquery.io/t/about-the-queries-insights-category/1208 "2025-08-05T07:45:13Z")
Share SQL queries, policy-as-code examples, and data insights built with CloudQuery. Whether you’re querying AWS, Azure, GCP, or any other source, this is the place to share what you’ve discovered and learn from others. --- ## [List all the unattached IP addresses in Azure, AWS, GCP](https://community.cloudquery.io/t/list-all-the-unattached-ip-addresses-in-azure-aws-gcp/1225)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 12, 2025, 1:40pm UTC](https://community.cloudquery.io/t/list-all-the-unattached-ip-addresses-in-azure-aws-gcp/1225 "2025-08-12T13:40:44Z")
Cloud providers charge for reserved IP addresses even when they’re not attached to resources. These “orphaned” IPs can accumulate significant costs over time, especially in large environments where they’re forgotten afte… --- ## [Find unattached disks](https://community.cloudquery.io/t/find-unattached-disks/1213)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 6, 2025, 7:52am UTC](https://community.cloudquery.io/t/find-unattached-disks/1213 "2025-08-06T07:52:20Z")
Unattached disks often result from incomplete resource deletion, failed deployments, or broken automation. They generate storage costs even when not in use and may contain sensitive data from previously terminated instan… --- ## [AWS EC2 instances authorizing SSH from anywhere](https://community.cloudquery.io/t/aws-ec2-instances-authorizing-ssh-from-anywhere/1224)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 12, 2025, 1:19pm UTC](https://community.cloudquery.io/t/aws-ec2-instances-authorizing-ssh-from-anywhere/1224 "2025-08-12T13:19:34Z")
EC2 instances with an open port 22 are a major security risk that could allow unauthorized access from any IP address. To find all instances with this port open, run a CloudQuery sync with AWS source plugins for these ta… --- ## [List Inactive IAM Users](https://community.cloudquery.io/t/list-inactive-iam-users/1223)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 11, 2025, 11:57am UTC](https://community.cloudquery.io/t/list-inactive-iam-users/1223 "2025-08-11T11:57:54Z")
Inactive IAM users represent dormant accounts that could be compromised by attackers to gain unauthorized access to AWS resources without being noticed. Regular identification and removal of unused accounts reduces the a… --- ## [Find AWS RDS Instances lacking automated backups](https://community.cloudquery.io/t/find-aws-rds-instances-lacking-automated-backups/1220)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 11, 2025, 10:49am UTC](https://community.cloudquery.io/t/find-aws-rds-instances-lacking-automated-backups/1220 "2025-08-11T10:49:56Z")
Automated backups are essential for disaster recovery and business continuity, as manual backup processes are prone to human error and may not capture data consistently. Here’s a simple PostgreSQL query to list all RDS … --- ## [Find AWS RDS Instances not Using Encryption at Rest](https://community.cloudquery.io/t/find-aws-rds-instances-not-using-encryption-at-rest/1219)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 11, 2025, 10:45am UTC](https://community.cloudquery.io/t/find-aws-rds-instances-not-using-encryption-at-rest/1219 "2025-08-11T10:45:55Z")
Many regulatory frameworks (PCI DSS, HIPAA, GDPR) mandate encryption at rest for sensitive data, making unencrypted instances a compliance violation. Unencrypted databases are vulnerable if the underlying storage is comp… --- ## [AWS Lambda Functions close to deprecation](https://community.cloudquery.io/t/aws-lambda-functions-close-to-deprecation/1216)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 8, 2025, 12:42pm UTC](https://community.cloudquery.io/t/aws-lambda-functions-close-to-deprecation/1216 "2025-08-08T12:42:36Z")
Older runtimes often have slower cold start times, which can increase your billable duration. They also come with a bit of higher security risks than the modern ones. We built the End of Life plugin that syncs data from… --- ## [Publicly Accessible EC2 Instances](https://community.cloudquery.io/t/publicly-accessible-ec2-instances/1217)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 8, 2025, 12:54pm UTC](https://community.cloudquery.io/t/publicly-accessible-ec2-instances/1217 "2025-08-08T12:54:29Z")
Exposed instances create attack vectors for unauthorized access. You can easily list all publicly accessible AWS EC2 instances synced with CloudQuery with this PostgreSQL query: SELECT account\_id, instance\_id, subnet\_id… --- ## [List IAM users without MFA](https://community.cloudquery.io/t/list-iam-users-without-mfa/1214)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 7, 2025, 10:04am UTC](https://community.cloudquery.io/t/list-iam-users-without-mfa/1214 "2025-08-07T10:04:34Z")
IAM users with access to your AWS infrastructure without the multi-factor authentication represent a significant security risk. If you need to audit and report on MFA adoption across all your AWS accounts, here’s a simpl… --- ## [Get Unused Elastic IPs](https://community.cloudquery.io/t/get-unused-elastic-ips/1215)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 7, 2025, 10:15am UTC](https://community.cloudquery.io/t/get-unused-elastic-ips/1215 "2025-08-07T10:15:58Z")
AWS charges for Elastic IPs that are allocated but not associated with running instances. These charges can accumulate quickly across large infrastructures, making unused EIPs a common source of unnecessary costs. Here’s… --- ## [List EC2 instances that are not using Graviton processors](https://community.cloudquery.io/t/list-ec2-instances-that-are-not-using-graviton-processors/1212)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 6, 2025, 7:51am UTC](https://community.cloudquery.io/t/list-ec2-instances-that-are-not-using-graviton-processors/1212 "2025-08-06T07:51:10Z")
Graviton-based instances provide better performance at a lower cost. Here’s a PostgreSQL query that you can use to find all expired certificates from your AWS CloudQuery sync. SELECT arn, instance\_type, region FROM… --- ## [Find GCP BigQuery tables without partitioning enabled](https://community.cloudquery.io/t/find-gcp-bigquery-tables-without-partitioning-enabled/1211)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 6, 2025, 7:50am UTC](https://community.cloudquery.io/t/find-gcp-bigquery-tables-without-partitioning-enabled/1211 "2025-08-06T07:50:13Z")
Tables without partitioning lead to expensive queries due to full table scans. Here’s a PostgreSQL query that you can use to find all expired certificates from your GCP CloudQuery sync. SELECT friendly\_name, project\_id… --- ## [Identify Expired Certificates](https://community.cloudquery.io/t/identify-expired-certificates/1210)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 6, 2025, 7:49am UTC](https://community.cloudquery.io/t/identify-expired-certificates/1210 "2025-08-06T07:49:10Z")
Expired SSL certificates can lead to service disruptions and security vulnerabilities. Here’s a PostgreSQL query that you can use to find all expired certificates from your AWS CloudQuery sync. SELECT account\_id, … --- ## [Find public S3 buckets](https://community.cloudquery.io/t/find-public-s3-buckets/1209)
**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\ **Replies:** 0\ **Last updated:** [August 6, 2025, 7:27am UTC](https://community.cloudquery.io/t/find-public-s3-buckets/1209 "2025-08-06T07:27:19Z")
Public S3 buckets can expose sensitive data, leading to breaches. Here’s a PostgreSQL query that you can use to find all public S3 buckets from your AWS CloudQuery sync. WITH policy\_allow\_public AS ( SELECT arn, COU…