Control: Logging of delivery status should be enabled for notification messages sent to a topic

powerpipe control run aws_compliance.control.sns_topic_notification_delivery_status_enabled

powerpipe login
powerpipe control run aws_compliance.control.sns_topic_notification_delivery_status_enabled --share

select
  topic_arn as resource,
  case
    when application_failure_feedback_role_arn is null
      and firehose_failure_feedback_role_arn is null
      and http_failure_feedback_role_arn is null
      and lambda_failure_feedback_role_arn is null
      and sqs_failure_feedback_role_arn is null then 'alarm'
    else 'ok'
  end as status,
  case
    when application_failure_feedback_role_arn is null
      and firehose_failure_feedback_role_arn is null
      and http_failure_feedback_role_arn is null
      and lambda_failure_feedback_role_arn is null
      and sqs_failure_feedback_role_arn is null then title || ' has delivery status logging for notification messages disabled.'
    else title || ' has delivery status logging for notification messages enabled.'
  end as reason
  
  , region, account_id
from
  aws_sns_topic;