rage.fail

azure-aks-user-mi-attached

explicit azure emits AttachedTo

match (record)

{ "field": "identity.userAssignedIdentities", "resource_type": "Microsoft.ContainerService/managedClusters" }

emit

source type	`ManagedIdentity`
target type	`Compute`
source	`<user-assigned managed identity>`
target	`<managedCluster>`

Narrative

User-assigned MI {mi.name} is attached to AKS cluster {cluster.name}.

Raw rule rules/explicit/azure-aks.yaml

id: azure-aks-user-mi-attached
emits: AttachedTo
applies_to:
- azure
match_record:
  resource_type: Microsoft.ContainerService/managedClusters
  field: identity.userAssignedIdentities
emit:
  source_type: ManagedIdentity
  target_type: Compute
  source: <user-assigned managed identity>
  target: <managedCluster>
  api_source: az aks show
  evidence_field: identity.userAssignedIdentities
  narrative: User-assigned MI {mi.name} is attached to AKS cluster {cluster.name}.