Control: Web apps detailed error messages should be enabled
Description
This control ensures that a web app detailed error message is enabled.
Usage
Run the control in your terminal:
powerpipe control run terraform_azure_compliance.control.appservice_web_app_detailed_error_messages_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_azure_compliance.control.appservice_web_app_detailed_error_messages_enabled --share
SQL
This control uses a named query:
select address as resource, case when ((attributes_std -> 'logs' ->> 'detailed_error_messages_enabled') = 'true') or ((attributes_std -> 'logs' ->> 'detailed_error_messages') = 'true') then 'ok' else 'alarm' end status, split_part(address, '.', 2) || case when ((attributes_std -> 'logs' ->> 'detailed_error_messages_enabled') = 'true') or ((attributes_std -> 'logs' ->> 'detailed_error_messages') = 'true') then ' detailed error messages enabled' else ' detailed error messages disabled' end || '.' reason , path || ':' || start_linefrom terraform_resourcewhere type in ('azurerm_app_service', 'azurerm_linux_web_app', 'azurerm_windows_web_app');