Control: OSS buckets should have lifecycle policies

powerpipe control run alicloud_thrifty.control.oss_bucket_without_lifecycle_policy

powerpipe login
powerpipe control run alicloud_thrifty.control.oss_bucket_without_lifecycle_policy --share

select
  arn as resource,
  case
    when lifecycle_rules is null then 'alarm'
    when lifecycle_rules @> '[{"Status":"Enabled"}]' then 'ok'
    else 'alarm'
  end as status,
  case
    when lifecycle_rules is null then title || ' has no lifecycle policy.'
    when lifecycle_rules @> '[{"Status":"Enabled"}]' then title || ' has lifecycle policy.'
    else title || ' has disabled lifecycle policy.'
  end as reason,
  account_id,
  region
from
  alicloud_oss_bucket;