Query: application_gateway_min_tls_1_2

select
  ag.id as resource,
  case
    when ssl_policy is null or ((ssl_policy ->> 'minProtocolVersion') in ('TLSv1_2' , 'TLSv1_3')) then 'ok'
    else 'alarm'
  end as status,
  case
    when ssl_policy is null then ag.name || ' minimum TLS version set to TLSv1_2.'
    else ag.name || ' minimum TLS version set to ' || (ssl_policy ->> 'minProtocolVersion') || '.'
  end as reason
  
  , ag.resource_group as resource_group
  , sub.display_name as subscription
from
  azure_application_gateway ag
  left join azure_subscription sub on sub.subscription_id = ag.subscription_id;