Control: Subscriptions should have a contact email address for security issues

powerpipe control run azure_compliance.control.securitycenter_email_configured

powerpipe login
powerpipe control run azure_compliance.control.securitycenter_email_configured --share

with contact_info as (
  select
    jsonb_agg(email) filter (where name = 'default' and email != '') as default_email,
    count(*) filter (where name != 'default') as non_default_count,
    count(*) filter (where name = 'default') as default_count,
    subscription_id
  from
    azure_security_center_contact
  group by
    subscription_id
  limit 1
)
select
  sub.subscription_id as resource,
  case
    when non_default_count > 0 then 'ok'
    when default_count = 1 and jsonb_array_length(default_email) != 0 then 'ok'
    else 'alarm'
  end as status,
  case
    when non_default_count > 0 then 'Additional email addresses configured.'
    when default_count = 1 and default_email is not null then'Additional email addresses configured.'
    else 'Additional email addresses not configured.'
  end as reason
  
  , sub.display_name as subscription
from
  azure_subscription sub
  left join contact_info ci on sub.subscription_id = ci.subscription_id;