Query: lambda_function_restrict_public_url

select
  arn as resource,
  case
    when url_config is null then 'info'
    when url_config ->> 'AuthType' = 'AWS_IAM' then 'ok'
    else 'alarm'
  end as status,
  case
    when url_config is null then title || ' having no URL config.'
    when url_config ->> 'AuthType' = 'AWS_IAM' then title || ' restricts public function URL.'
    else title || ' public function URL configured.'
  end as reason,
  region,
  account_id
from
  aws_lambda_function;