Control: Ensure essential contacts is configured for Organization

powerpipe control run gcp_compliance.control.organization_essential_contacts_configured

powerpipe login
powerpipe control run gcp_compliance.control.organization_essential_contacts_configured --share

-- "Essential Contacts API" should be Enabled and requires "Essential Contacts Viewer" at Organization level.
with categories as (
  select
    name,
    title,
    _ctx,
    organization_id,
    notificationtype
  from
    gcp_organization,
    jsonb_array_elements(essential_contacts) as ec,
    jsonb_array_elements_text(ec -> 'notificationCategorySubscriptions') as notificationtype
)
select
  name resource,
  case
    when jsonb_array_length('["LEGAL", "SECURITY", "SUSPENSION", "TECHNICAL", "TECHNICAL_INCIDENTS"]'::jsonb - array_agg(notificationtype)) = 0 then 'ok'
    when to_jsonb(array_agg(notificationtype)) @> '["ALL"]'::jsonb then 'ok'
    else 'alarm'
  end as status,
  case
    when jsonb_array_length('["LEGAL", "SECURITY", "SUSPENSION", "TECHNICAL", "TECHNICAL_INCIDENTS"]'::jsonb - array_agg(notificationtype)) = 0
      then title || ' essential contacts are configured.'
    when to_jsonb(array_agg(notificationtype)) @> '["ALL"]'::jsonb
      then title || ' essential contacts are configured.'
    else title || ' essential contacts are not configured.'
  end as reason,
  organization_id
from
  categories
group by
  name,
  title,
  _ctx,
  organization_id;