Skip to content

bug: elasticbeanstalk/advanced_health_reporting_enabled.sql always has not match health_status value #13768

@sabe6

Description

@sabe6

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

https://docs.aws.amazon.com/ja_jp/securityhub/latest/userguide/elasticbeanstalk-controls.html#elasticbeanstalk-1

ElasticBeanstalk.1 control.

When I confured enhanced health reporting enabled, health_status became '' empty string, not null.

Expected Behavior

Patch it works:

diff --git a/plugins/source/aws/policies/queries/elasticbeanstalk/advanced_health_reporting_enabled.sql b/plugins/source/aws/policies/queries/elasticbeanstalk/advanced_health_reporting_enabled.sql
index 527020f92..0ffcc98b5 100644
--- a/plugins/source/aws/policies/queries/elasticbeanstalk/advanced_health_reporting_enabled.sql
+++ b/plugins/source/aws/policies/queries/elasticbeanstalk/advanced_health_reporting_enabled.sql
@@ -7,7 +7,7 @@ select
     account_id,
     arn as resource_id,
     case when
-        health_status is null
+        (health_status is null or health_status = '')
         or health is null
         then 'fail'
         else 'pass'

CloudQuery (redacted) config

N/A

Steps To Reproduce

No response

CloudQuery (redacted) logs

N/A

CloudQuery version

main

Additional Context

No response

Pull request (optional)

  • I can submit a pull request

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions