Control: Glue dev endpoints job bookmark encryption should be enabled

powerpipe control run aws_compliance.control.glue_dev_endpoint_job_bookmarks_encryption_enabled

powerpipe login
powerpipe control run aws_compliance.control.glue_dev_endpoint_job_bookmarks_encryption_enabled --share

select
  e.arn as resource,
  case
    when job_bookmarks_encryption is not null and job_bookmarks_encryption ->> 'JobBookmarksEncryptionMode' != 'DISABLED' then 'ok'
    else 'alarm'
  end as status,
  case
    when job_bookmarks_encryption is not null and job_bookmarks_encryption ->> 'JobBookmarksEncryptionMode' != 'DISABLED' then e.title || ' job bookmark encryption enabled.'
    else e.title || ' job bookmark encryption disabled.'
  end as reason
  , e.region, e.account_id
from
  aws_glue_dev_endpoint as e
  left join aws_glue_security_configuration as c on e.security_configuration = c.name;