Query: identity_default_tag

with default_tag_count as (
  select
    count(compartment_id),
    compartment_id
  from
    oci_identity_tag_default
  where
    lifecycle_state = 'ACTIVE'
    and value = '${iam.principal.name}'
  group by
    compartment_id
)
select
  t.tenant_id as resource,
  case
    when d.compartment_id is null then 'alarm'
    else 'ok'
  end as status,
  case
    when d.compartment_id is null then 'Default tag criteria does not meet as per CIS recommendation.'
    else 'Default tag criteria meets as CIS per recommendation.'
  end as reason,
  t.tenant_name as tenant
from
  oci_identity_tenancy t
  left join default_tag_count d on t.tenant_id = d.compartment_id;