Control: VPCs should only be peered with trusted accounts

powerpipe control run aws_perimeter.control.vpc_peering_connection_cross_account_shared

powerpipe login
powerpipe control run aws_perimeter.control.vpc_peering_connection_cross_account_shared --share

select
  id as resource,
  case
    when accepter_owner_id = requester_owner_id
    or accepter_owner_id = any (($1) :: text [ ]) then 'ok'
    else 'info'
  end status,
  case
    when accepter_owner_id = requester_owner_id
    or accepter_owner_id = any (($1) :: text [ ]) then title || ' is peered with a trust account.'
    else title || ' is peered with untrusted account ' || accepter_owner_id || '.'
  end reason,
  region,
  account_id
from
  aws_vpc_peering_connection;