Control: Classic Load Balancers should have connection draining enabled
Description
This control checks whether Classic Load Balancers have connection draining enabled.
Usage
Run the control in your terminal:
powerpipe control run terraform_aws_compliance.control.ec2_classic_lb_connection_draining_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_aws_compliance.control.ec2_classic_lb_connection_draining_enabled --share
SQL
This control uses a named query:
select address as resource, case when (attributes_std -> 'connection_draining') is null then 'alarm' when (attributes_std -> 'connection_draining')::bool then 'ok' else 'alarm' end status, split_part(address, '.', 2) || case when (attributes_std -> 'connection_draining') is null then ' ''connection_draining'' disabled' when (attributes_std -> 'connection_draining')::bool then ' ''connection_draining'' enabled' else ' ''connection_draining'' disabled' end || '.' reason , path || ':' || start_linefrom terraform_resourcewhere type = 'aws_elb';