Control: ElasticSearch domains should not exceed tag limit

Usage

steampipe check aws_tags.control.elasticsearch_domain_tag_limit

aws_elasticsearch_domain

Params

45

SQL

    with analysis as (
      select
        arn,
        title,
        cardinality(array(select jsonb_object_keys(tags))) as num_tag_keys,
        region, account_id
      from
        aws_elasticsearch_domain
    )
    select
      arn as resource,
      case
        when num_tag_keys > $1::integer then 'alarm'
        else 'ok'
      end as status,
      title || ' has ' || num_tag_keys || ' tag(s).' as reason,
      region, account_id
    from
      analysis