turbot/steampipe-mod-alicloud-compliance

Query: cs_kubernetes_cluster_private_cluster_enabled

Usage

powerpipe query alicloud_compliance.query.cs_kubernetes_cluster_private_cluster_enabled

SQL

select
arn as resource,
case
when state != 'running' then 'skip'
when master_url is not null
and (master_url::jsonb->>'api_server_endpoint') is not null
and (master_url::jsonb->>'api_server_endpoint') != ''
then 'alarm'
else 'ok'
end as status,
case
when state != 'running' then title || ' is in ' || state || ' state.'
when master_url is not null and (master_url::jsonb->>'api_server_endpoint') is not null
and (master_url::jsonb->>'api_server_endpoint') != '' then title || ' has a public API server endpoint configured.'
else title || ' is configured as a private cluster with no public API server endpoint.'
end as reason
, account_id as account_id, region as region
from
alicloud_cs_kubernetes_cluster;

Controls

The query is being used by the following controls: