Control: Key vault managed hardware security modules should be tagged

powerpipe control run azure_tags.control.key_vault_managed_hardware_security_module_untagged

powerpipe login
powerpipe control run azure_tags.control.key_vault_managed_hardware_security_module_untagged --share

    select
      id as resource,
      case
        when tags is not null or tags::text <> '{}' then 'ok'
        else 'alarm'
      end as status,
      case
        when tags is not null or tags::text <> '{}' then title || ' has tags.'
        else title || ' has no tags.'
      end as reason
      
      , subscription_id as subscription_id
    from
      azure_key_vault_managed_hardware_security_module;