Control: VPC subnets should not auto-assign public IP addresses

powerpipe control run aws_perimeter.control.vpc_subnet_auto_assign_public_ip_disabled

powerpipe login
powerpipe control run aws_perimeter.control.vpc_subnet_auto_assign_public_ip_disabled --share

select
  subnet_id as resource,
  case
    when map_public_ip_on_launch = 'false' then 'ok'
    else 'alarm'
  end as status,
  case
    when map_public_ip_on_launch = 'false' then title || ' auto-assign public IP addresses disabled.'
    else title || ' auto-assign public IP addresses enabled.'
  end as reason,
  region,
  account_id
from
  aws_vpc_subnet;