turbot/ibm_compliance

Query: internet_service_ddos_protection_active

Usage

powerpipe query ibm_compliance.query.internet_service_ddos_protection_active

SQL

with proxy_enabled as(
select
rule ->> 'proxied' as proxy,
name,
id
from
ibm_cis_domain,
jsonb_array_elements(global_load_balancer) as rule
where
rule ->> 'proxied' = 'true'
)
select
p.id as resource,
case
when p.id is null then 'alarm'
else 'ok'
end as status,
case
when p.id is null then p.name || ' DDoS protection is inactive on Cloud Internet Services.'
else p.name || ' DDoS protection is active on Cloud Internet Services.'
end as reason,
acc.guid as account_id
from
proxy_enabled as p,
ibm_account as acc;

Controls

The query is being used by the following controls: