Control: 1.1.2.4 Ensure join before host is set to disabled (Automated)

powerpipe control run zoom_compliance.control.cis_v100_1_1_2_4

powerpipe login
powerpipe control run zoom_compliance.control.cis_v100_1_1_2_4 --share

select
  -- Required Columns
  account_id as resource,
  case
    when (schedule_meeting -> 'join_before_host')::bool then 'alarm'
    else 'ok'
  end as status,
  'Join Before Host is ' || case when (schedule_meeting -> 'join_before_host')::bool then 'enabled' else 'disabled' end || '.' as reason
from
  zoom_account_settings

union

select
  -- Required Columns
  account_id as resource,
  case
    when (schedule_meeting -> 'join_before_host')::bool then 'ok'
    else 'alarm'
  end as status,
  'Join Before Host setting is' || case when not (schedule_meeting -> 'join_before_host')::bool then ' not' else '' end || ' locked.' as reason
from
  zoom_account_lock_settings