turbot/steampipe-mod-guardrails-insights

Control: Turbot > Workspace > Auto Update

Description

Check the policy values for guardrails mod auto updates

Usage

Run the control in your terminal:

powerpipe control run guardrails_insights.control.guardrails_workspace_mod_auto_update

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run guardrails_insights.control.guardrails_workspace_mod_auto_update --share

SQL

This control uses a named query:

select
resource_trunk_title,
workspace,
workspace as resource,
case
when value = 'Enforce within Mod Change Window' then 'ok'
else 'alarm'
end as status,
case
when value = 'Enforce within Mod Change Window' then 'Policy recommendation met'
else 'Policy recommendation not met'
end as reason
from
guardrails_policy_setting
where
policy_type_uri = 'tmod:@turbot/turbot#/policy/types/modAutoUpdate'
order by
workspace;