turbot/gcp_compliance

Query: compute_external_backend_service_iap_enabled

Usage

powerpipe query gcp_compliance.query.compute_external_backend_service_iap_enabled

SQL

select
self_link as resource,
case
when not load_balancing_scheme like 'EXTERNAL%' then 'skip'
when (iap -> 'enabled')::bool then 'ok'
else 'alarm'
end as status,
case
when not load_balancing_scheme like 'EXTERNAL%' then name || ' is external backend service.'
when (iap -> 'enabled')::bool then name || ' IAP enabled.'
else name || ' IAP disabled.'
end as reason
, location as location, project as project
from
gcp_compute_backend_service;

Controls

The query is being used by the following controls: