Control: Log profiles should not exceed tag limit

Usage

Run the control in your terminal:

steampipe check azure_tags.control.log_profile_tag_limit

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share azure_tags.control.log_profile_tag_limit

azure_log_profile

Params

45

SQL

with analysis as (
  select
    id,
    title,
    cardinality(
      array(
        select
          jsonb_object_keys(tags)
      )
    ) as num_tag_keys,
    resource_group,
    subscription_id
  from
    azure_log_profile
)
select
  id as resource,
  case
    when num_tag_keys > $1 :: integer then 'alarm'
    else 'ok'
  end as status,
  title || ' has ' || num_tag_keys || ' tag(s).' as reason,
  resource_group,
  subscription_id
from
  analysis;