turbot/aws_tags
GitHub
Loading controls...

Control: S3 buckets should not exceed tag limit

Description

Check if the number of tags on S3 buckets do not exceed the limit.

Usage

Run the control in your terminal:

steampipe check aws_tags.control.s3_bucket_tag_limit

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share aws_tags.control.s3_bucket_tag_limit

Plugins & Tables

Params

ArgsNameDefaultDescriptionVariable
$1tag_limit
45

SQL

with analysis as (
select
arn,
title,
cardinality(
array(
select
jsonb_object_keys(tags)
)
) as num_tag_keys,
region,
account_id,
tags,
_ctx
from
aws_s3_bucket
)
select
arn as resource,
case
when num_tag_keys > $1 :: integer then 'alarm'
else 'ok'
end as status,
title || ' has ' || num_tag_keys || ' tag(s).' as reason,
region,
account_id
from
analysis;