Control: CodeBuild project environments should not have privileged mode enabled

powerpipe control run aws_compliance.control.codebuild_project_environment_privileged_mode_disabled

powerpipe login
powerpipe control run aws_compliance.control.codebuild_project_environment_privileged_mode_disabled --share

select
  arn as resource,
  case
    when environment ->> 'PrivilegedMode' = 'true' then 'alarm'
    else 'ok'
  end as status,
  case
    when environment ->> 'PrivilegedMode' = 'true' then title || ' environment privileged mode enabled.'
    else title || ' environment privileged mode disabled.'
  end as reason
  
  , region, account_id
from
  aws_codebuild_project;