Control: S3 bucket lifecycle configuration should abort incomplete multipart uploads

powerpipe control run terraform_aws_compliance.control.s3_bucket_abort_incomplete_multipart_upload_enabled

powerpipe login
powerpipe control run terraform_aws_compliance.control.s3_bucket_abort_incomplete_multipart_upload_enabled --share

with lifecycle_configuration_with_abort_incomplete_multipart_upload as (
  select
    concat(address) as name
  from
    terraform_resource,
    jsonb_array_elements(attributes_std -> 'rule') as r
  where
    r ->> 'id' = 'AbortIncompleteMultipartUploadRule'
    and r ->> 'status' = 'Enabled'
    and type = 'aws_s3_bucket_lifecycle_configuration'
)
select
  r.address as resource,
  case
    when u.name is not null then 'ok'
    else 'alarm'
  end as status,
  split_part(r.address, '.', 2) || case
    when u.name is not null then ' has abort incomplete multipart upload enabled'
    else ' has abort incomplete multipart upload disabled'
  end || '.' as reason
  , path || ':' || start_line
from
  terraform_resource as r
  left join lifecycle_configuration_with_abort_incomplete_multipart_upload as u on u.name = r.address
where
  r.type = 'aws_s3_bucket_lifecycle_configuration';