rage.fail

azure-aml-compute-located-in-vnet

explicit azure emits LocatedIn

match (record)

{ "field": "properties.subnet.id", "resource_type": "Microsoft.MachineLearningServices/workspaces/computes" }

where

properties.subnet.id is not null

emit

source type	`Compute`
target type	`VirtualNetwork`
source	`<AML compute cluster or compute instance>`
target	`<VNet inferred from subnet resource ID>`

Narrative

AML compute {compute.name} is located in VNet subnet {subnet.name}.

Raw rule rules/explicit/azure-machinelearning.yaml

id: azure-aml-compute-located-in-vnet
emits: LocatedIn
applies_to:
- azure
match_record:
  resource_type: Microsoft.MachineLearningServices/workspaces/computes
  field: properties.subnet.id
where:
- properties.subnet.id is not null
emit:
  source_type: Compute
  target_type: VirtualNetwork
  source: <AML compute cluster or compute instance>
  target: <VNet inferred from subnet resource ID>
  api_source: GET /...workspaces/{ws}/computes/{name}
  evidence_field: properties.subnet.id
  narrative: AML compute {compute.name} is located in VNet subnet {subnet.name}.