Control: Big Query Table deletion protection should be enabled
Description
This rule ensures that Big Query Table has deletion protection enabled.
Usage
Run the control in your terminal:
powerpipe control run terraform_gcp_compliance.control.bigquery_table_deletion_protection_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_gcp_compliance.control.bigquery_table_deletion_protection_enabled --share
SQL
This control uses a named query:
select address as resource, case when (attributes_std -> 'deletion_protection') is null then 'alarm' when (attributes_std -> 'deletion_protection')::boolean then 'ok' else 'alarm' end status, split_part(address, '.', 2) || case when (attributes_std -> 'deletion_protection') is null then ' ''deletion_protection'' not defined' when (attributes_std -> 'deletion_protection')::boolean then ' deletion protection enabled' else ' deletion protection disabled' end || '.' as reason , path || ':' || start_linefrom terraform_resourcewhere type = 'google_bigquery_table';