Query: compute_firewall_allow_connections_proxied_by_iap

select
  self_link resource,
  case
    when allowed @> '[{"IPProtocol":"tcp","ports":["80"]}]' and source_ranges ?& array['130.211.0.0/22', '35.191.0.0/16'] then 'ok'
    else 'alarm'
  end as status,
  case
    when allowed @> '[{"IPProtocol":"tcp","ports":["80"]}]' and source_ranges ?& array['130.211.0.0/22', '35.191.0.0/16']
      then title || ' only allows traffic proxied by IAP.'
    else title || ' not configured to only allow connections proxied by IAP.'
  end as reason
  , location as location, project as project
from
  gcp_compute_firewall;