turbot/terraform_gcp_compliance

Query: artifact_registry_repository_not_publicly_accessible

Usage

powerpipe query terraform_gcp_compliance.query.artifact_registry_repository_not_publicly_accessible

Steampipe Tables

SQL

select
address as resource,
case
when (attributes_std ->> 'member') in ('allUsers','allAuthenticatedUsers') or (attributes_std -> 'members') @> '["allUsers"]' or (attributes_std -> 'members') @> '["allAuthenticatedUsers"]' then 'alarm'
else 'ok'
end as status,
split_part(address, '.', 2) || case
when (attributes_std ->> 'member') in ('allUsers','allAuthenticatedUsers') or (attributes_std -> 'members') @> '["allUsers"]' or (attributes_std -> 'members') @> '["allAuthenticatedUsers"]' then ' is publicly accessible'
else ' is not publicly accessible'
end || '.' reason
, path || ':' || start_line
from
terraform_resource
where
type in ('google_artifact_registry_repository_iam_member','google_artifact_registry_repository_iam_binding');

Controls

The query is being used by the following controls: