Control: ElasticSearch domains should not exceed tag limit
Description
Check if the number of tags on ElasticSearch domains do not exceed the limit.
Usage
steampipe check aws_tags.control.elasticsearch_domain_tag_limit
Plugins & Tables
Params
Args | Name | Default | Description | Variable |
---|---|---|---|---|
$1 | tag_limit |
|
SQL
with analysis as ( select arn, title, cardinality(array(select jsonb_object_keys(tags))) as num_tag_keys, region, account_id from aws_elasticsearch_domain ) select arn as resource, case when num_tag_keys > $1::integer then 'alarm' else 'ok' end as status, title || ' has ' || num_tag_keys || ' tag(s).' as reason, region, account_id from analysis