Steampipe throws unexpected EOF error when joining multiple tables on the JSON qual column

[LalitLab]

I have faced similar error

> select
  sb.name,
  rpa.is_public,
  access_level,
  public_statement_ids
from
  aws_s3_bucket as sb 
  left join aws_resource_policy_analysis rpa on rpa.policy = sb.policy
2022-06-19 06:24:32.236 UTC [TRACE] steampipe: resolveQuery select
  sb.name,
  rpa.is_public,
  access_level,
  public_statement_ids
from
  aws_s3_bucket as sb 
  left join aws_resource_policy_analysis rpa on rpa.policy = sb.policy
Error: unexpected EOF

Database logs for the same: database-2022-06-19.log

Below query without join works fine with json quals

select 
  is_public, access_level, 
  allowed_organization_ids, 
  allowed_principal_account_ids, 
  allowed_principal_federated_identities, 
  allowed_principal_services, allowed_principals, 
  public_access_levels, 
  public_statement_ids 
from 
  aws_resource_policy_analysis 
where 
  policy = '{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":{"AWS":"*"},"Action":["s3:GetBucketLocation","s3:ListBucket"],"Resource":"arn:aws:s3:::test"},{"Sid":"OrganizationAccess","Effect":"Allow","Principal":{"AWS":"*"},"Action":["s3:GetBucketLocation","s3:ListBucket"],"Resource":"arn:aws:s3:::test","Condition":{"StringEquals":{"aws:PrincipalOrgID":["o-123456"]}}},{"Sid":"AccountPrincipals","Effect":"Allow","Principal":{"AWS":["arn:aws:iam::123456789012:user/victor@xyz.com","arn:aws:iam::111122223333:root"]},"Action":["s3:GetBucketLocation","s3:ListBucket"],"Resource":"arn:aws:s3:::test"},{"Sid":"FederatedPrincipals","Effect":"Allow","Principal":{"Federated":"arn:aws:iam::111011101110:saml-provider/AWSSSO_DO_NOT_DELETE"},"Action":["s3:GetBucketLocation","s3:ListBucket"],"Resource":"arn:aws:s3:::test"},{"Sid":"ServicePrincipals","Effect":"Allow","Principal":{"Service":["ecs.amazonaws.com","elasticloadbalancing.amazonaws.com"]},"Action":["s3:GetBucketLocation","s3:ListBucket"],"Resource":"arn:aws:s3:::test"},{"Sid":"PublicAccess","Effect":"Allow","Principal":{"AWS":"*"},"Action":["s3:GetBucketLocation","s3:ListBucket"],"Resource":"arn:aws:s3:::test"}]}'

To replicate the issue

• Build the AWS plugin locally from the branch public-access-table and try the below query

select
  sb.name,
  rpa.is_public,
  access_level,
  public_statement_ids
from
  aws_s3_bucket as sb 
  left join aws_resource_policy_analysis rpa on rpa.policy = sb.policy