turbot/steampipe-mod-aws-compliance

Query: organizational_tag_policies_enabled

Usage

powerpipe query aws_compliance.query.organizational_tag_policies_enabled

Steampipe Tables

SQL

with tag_policy_enabled as (
select
_ctx,
account_id,
count(*) as count
from
aws_organizations_policy
where
type = 'TAG_POLICY'
group by
_ctx,
account_id
)
select
case
when count > 0 then 'ok'
else 'alarm'
end as status,
case
when count > 0 then 'Organizational tag policies are enabled.'
else 'Organizational tag policies are disabled.'
end as reason
, account_id
from
tag_policy_enabled;

Controls

The query is being used by the following controls: