fix: fix pennywise_cost_estimate

Author: artaasadi

compliance/controls/baseline/aws/dynamoDb/aws_unused_dynamodb_table.yaml

@@ -11,7 +11,7 @@ Query:
       kaytu_resource_id,
       kaytu_account_id,
       case
-        when item_count::int = 0 then (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::dynamodb::table' and resource_id = t.kaytu_resource_id)
+        when item_count::int = 0 then (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::dynamodb::table' and resource_id = t.kaytu_resource_id limit 1)
         else 0
       end as cost_optimization,
       case

compliance/controls/baseline/aws/ebs/aws_ebs_volume_unused.yaml

@@ -12,7 +12,7 @@ Query:
       kaytu_resource_id as kaytu_resource_id,
       case
         when state = 'in-use' then 0
-        else (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::ec2::volume' and resource_id = v.kaytu_resource_id)
+        else (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::ec2::volume' and resource_id = v.kaytu_resource_id limit 1)
       end as cost_optimization,
       case
         when state = 'in-use' then 'ok'

compliance/controls/baseline/aws/ebs/aws_ebs_volumes_attached_to_stopped_ec2_instances.yaml

@@ -12,7 +12,7 @@ Query:
       v.kaytu_account_id,
       case
         when i.instance_state = 'running' then 0
-        else (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::ec2::volume' and resource_id = v.kaytu_resource_id)
+        else (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::ec2::volume' and resource_id = v.kaytu_resource_id limit 1)
       end as cost_optimization,
       case
         when i.instance_state = 'running' then 'ok'

compliance/controls/baseline/aws/ebs/aws_ebs_volumes_too_old_snapshots.yaml

@@ -11,7 +11,7 @@ Query:
       kaytu_resource_id,
       kaytu_account_id,
       CASE
-        WHEN start_time + ({{.awsEbsSnapshotAgeMaxDays}}::INT || ' days')::interval < now() THEN (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::ec2::volumesnapshot' and resource_id = es.kaytu_resource_id)
+        WHEN start_time + ({{.awsEbsSnapshotAgeMaxDays}}::INT || ' days')::interval < now() THEN (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::ec2::volumesnapshot' and resource_id = es.kaytu_resource_id limit 1)
         ELSE 0
       END AS cost_optimization,
       CASE

compliance/controls/baseline/aws/ec2/aws_ec2_ami_too_old.yaml

@@ -26,7 +26,7 @@ Query:
         when is_aws_backup_managed then 0
         when root_device_type <> 'ebs' then 0
         when now() - (creation_date)::timestamp > '{{.awsEbsAmiAgeMaxDays}} days'::interval then (SELECT SUM((select cost from pennywise_cost_estimate AS es WHERE es.resource_type = 'aws::ec2::volumesnapshot' 
-             AND es.resource_id = s.arn))
+             AND es.resource_id = s.arn limit 1))
              FROM jsonb_array_elements(block_device_mappings) AS bdm
              LEFT JOIN aws_ebs_snapshot AS s ON s.snapshot_id = bdm -> 'Ebs' ->> 'SnapshotId')
         else 0

compliance/controls/baseline/aws/ec2/aws_unused_ami.yaml

@@ -29,7 +29,7 @@ Query:
         when is_aws_backup_managed then 0
         when ami.root_device_type <> 'ebs' then 0
         when i.arn is null then (SELECT SUM((select cost from pennywise_cost_estimate AS es WHERE es.resource_type = 'aws::ec2::volumesnapshot' 
-             AND es.resource_id = s.arn))
+             AND es.resource_id = s.arn limit 1))
              FROM jsonb_array_elements(ami.block_device_mappings) AS bdm
              LEFT JOIN aws_ebs_snapshot AS s ON s.snapshot_id = bdm -> 'Ebs' ->> 'SnapshotId')
         else 0

compliance/controls/baseline/aws/load_balancer/aws_unused_application_load_balancers.yaml

@@ -28,7 +28,7 @@ Query:
         else a.title || ' has registered target of type ' || b.target_type || '.'
       end as reason,
       case
-        when b.load_balancer_arn is null then (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::elasticloadbalancingv2::loadbalancer' and resource_id = a.kaytu_resource_id)
+        when b.load_balancer_arn is null then (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::elasticloadbalancingv2::loadbalancer' and resource_id = a.kaytu_resource_id limit 1)
         else 0
       end as cost_optimization,
       a.region,

compliance/controls/baseline/aws/load_balancer/aws_unused_elastic_load_balancers.yaml

@@ -12,7 +12,7 @@ Query:
       kaytu_resource_id,
       case
         when jsonb_array_length(instances) > 0 then 0
-        else (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::elasticloadbalancing::loadbalancer' and resource_id = lb.kaytu_resource_id)
+        else (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::elasticloadbalancing::loadbalancer' and resource_id = lb.kaytu_resource_id limit 1)
       end as cost_optimization,
       case
         when jsonb_array_length(instances) > 0 then 'ok'

compliance/controls/baseline/aws/load_balancer/aws_unused_gateway_load_balancers.yaml

@@ -20,7 +20,7 @@ Query:
       kaytu_resource_id,
       kaytu_account_id,
       case
-        when jsonb_array_length(b.target_health_descriptions) = 0 then (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::elasticloadbalancingv2::loadbalancer' and resource_id = a.kaytu_resource_id)
+        when jsonb_array_length(b.target_health_descriptions) = 0 then (SELECT cost FROM pennywise_cost_estimate where resource_type = 'aws::elasticloadbalancingv2::loadbalancer' and resource_id = a.kaytu_resource_id limit 1)
         else 0
       end as cost_optimization,
       case

compliance/controls/baseline/aws/rds/aws_aurora_database_instance_accessibility.yaml

@@ -4,7 +4,7 @@ Description: "Ensure that all database instances within an Amazon Aurora cluster
 Connector:
 - aws
 Query:
-  Engine: CloudQL-v0.0.1
+  Engine: odysseus-v0.0.1
   QueryToExecute: |-
     with access_count as (
     select