turbot/steampipe-mod-terraform-azure-compliance

Control: Web apps should have health check enabled

Description

Health check increases your application's availability by rerouting requests away from unhealthy instances and replacing instances if they remain unhealthy.

Usage

Run the control in your terminal:

powerpipe control run terraform_azure_compliance.control.appservice_web_app_health_check_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_azure_compliance.control.appservice_web_app_health_check_enabled --share

SQL

This control uses a named query:

select
address as resource,
case
when (attributes_std -> 'site_config' -> 'health_check_path') is not null then 'ok'
else 'alarm'
end status,
split_part(address, '.', 2) || case
when (attributes_std -> 'site_config' -> 'health_check_path') is not null then ' health check enabled'
else ' health check disabled'
end || '.' reason
, path || ':' || start_line
from
terraform_resource
where
type in ('azurerm_app_service', 'azurerm_linux_web_app', 'azurerm_windows_web_app');

Tags