Control: Secrets Manager secrets should not exceed tag limit

Usage

Run the control in your terminal:

steampipe check aws_tags.control.secretsmanager_secret_tag_limit

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share aws_tags.control.secretsmanager_secret_tag_limit

aws_secretsmanager_secret

Params

45

SQL

with analysis as (
  select
    arn,
    title,
    cardinality(
      array(
        select
          jsonb_object_keys(tags)
      )
    ) as num_tag_keys,
    region,
    account_id,
    tags,
    _ctx
  from
    aws_secretsmanager_secret
)
select
  arn as resource,
  case
    when num_tag_keys > $1 :: integer then 'alarm'
    else 'ok'
  end as status,
  title || ' has ' || num_tag_keys || ' tag(s).' as reason,
  region,
  account_id
from
  analysis