Query: eks_cluster_control_plane_audit_logging

select
  'Control Plane Audit Logging' as label,
  case when l ->> 'Enabled'::text = 'true' then 'Enabled' else 'Disabled' end as value,
  case when l ->> 'Enabled'::text = 'true' then 'ok' else 'alert' end as type
from
  aws_eks_cluster,
  jsonb_array_elements(logging -> 'ClusterLogging') as l,
  jsonb_array_elements_text(l -> 'Types') as t
where
  t = 'audit'
  and arn = $1
  and account_id = split_part($1, ':', 5)
  and region = split_part($1, ':', 4);