Control: DRS jobs should be enabled

powerpipe control run aws_compliance.control.drs_job_enabled

powerpipe login
powerpipe control run aws_compliance.control.drs_job_enabled --share

with drs_job_count as (
  select
    count(*) as count,
    region,
    account_id,
    _ctx
  from
    aws_drs_job
  group by
    region,
    account_id,
    _ctx
)
select
  'arn:' || r.partition || '::' || r.region || ':' || r.account_id as resource,
  case
    when drs_job_count.count = 0 or drs_job_count.count is null then 'alarm'
    else 'ok'
  end as status,
  case
    when drs_job_count.count = 0 or drs_job_count.count is null then 'DRS job not enabled for region ' || r.region || '.'
    else 'DRS job enabled for region ' || r.region || '.'
  end as reason
  , drs_job_count.region, drs_job_count.account_id
from
  aws_region as r
  left join drs_job_count on r.region = drs_job_count.region;