Control: Web apps failed request tracing should be enabled

powerpipe control run terraform_azure_compliance.control.appservice_web_app_failed_request_tracing_enabled

powerpipe login
powerpipe control run terraform_azure_compliance.control.appservice_web_app_failed_request_tracing_enabled --share

select
  address as resource,
  case
    when (
      (
        attributes_std -> 'logs' ->> 'failed_request_tracing'
      ) = 'true'
    )
    or (
      (
        attributes_std -> 'logs' ->> 'failed_request_tracing_enabled'
      ) = 'true'
    ) then 'ok'
    else 'alarm'
  end status,
  split_part(address, '.', 2) || case
    when (
      (
        attributes_std -> 'logs' ->> 'failed_request_tracing'
      ) = 'true'
    )
    or (
      (
        attributes_std -> 'logs' ->> 'failed_request_tracing_enabled'
      ) = 'true'
    ) then ' failed request tracing enabled'
    else ' failed request tracing disabled'
  end || '.' reason,
  path || ':' || start_line
from
  terraform_resource
where
  type in (
    'azurerm_app_service',
    'azurerm_linux_web_app',
    'azurerm_windows_web_app'
  );