turbot/gcp_compliance

Query: project_oslogin_enabled

Usage

powerpipe query gcp_compliance.query.project_oslogin_enabled

SQL

select
id resource,
case
when common_instance_metadata -> 'items' @> '[{"key":"enable-oslogin","value":"TRUE"}]' then 'ok'
else 'alarm'
end as status,
case
when common_instance_metadata -> 'items' @> '[{"key":"enable-oslogin","value":"TRUE"}]' then title || ' OS login enabled.'
else title || ' OS login disabled.'
end as reason
, location as location, project as project
from
gcp_compute_project_metadata;

Controls

The query is being used by the following controls: