Control: ELB application load balancers should have Web Application Firewall (WAF) enabled

powerpipe control run aws_perimeter.control.elb_application_lb_waf_enabled

powerpipe login
powerpipe control run aws_perimeter.control.elb_application_lb_waf_enabled --share

with associated_resource as (
  select 
    arns
  from
    aws_wafv2_web_acl,
    jsonb_array_elements_text(associated_resources) as arns  
)
select
  arn as resource,
  case
    when ar.arns is not null then 'ok'
    else 'alarm'
  end as status,
  case
    when ar.arns is not null then title || ' WAF enabled.'
    else title || ' WAF disabled.'
  end as reason
  
  , region, account_id
from
  aws_ec2_application_load_balancer as lb
  left join associated_resource as ar on lb.arn = ar.arns;