turbot/terraform_aws_compliance

Query: codebuild_project_source_repo_oauth_configured

Usage

powerpipe query terraform_aws_compliance.query.codebuild_project_source_repo_oauth_configured

Steampipe Tables

SQL

with codebuild_projects as (
select
*
from
terraform_resource
where
type = 'aws_codebuild_project'
), codebuild_source_credential as (
select
*
from
terraform_resource
where
type = 'aws_codebuild_source_credential'
)
select
a.address as resource,
case
when (a.attributes_std -> 'source' ->> 'type') not in ('GITHUB', 'BITBUCKET') then 'skip'
when (b.attributes_std ->> 'auth_type') = 'OAUTH' then 'ok'
else 'alarm'
end as status,
split_part(a.address, '.', 2) || case
when (a.attributes_std -> 'source' ->> 'type') = 'NO_SOURCE' then ' doesn''t have input source code.'
when (a.attributes_std -> 'source' ->> 'type') not in ('GITHUB', 'BITBUCKET') then ' source code isn''t in GitHub/Bitbucket repository'
when (b.attributes_std ->> 'auth_type') = 'OAUTH' then ' using OAuth to connect source repository'
else ' not using OAuth to connect source repository'
end || '.' reason
, a.path || ':' || a.start_line
from
codebuild_projects as a
left join codebuild_source_credential as b on (b.attributes_std -> 'server_type') = (a.attributes_std -> 'source' -> 'type');

Controls

The query is being used by the following controls: