rage.fail

azure-aml-online-endpoint-executes-as-system-mi

explicit azure emits ExecutesAs

match (record)

{ "field": "identity.type", "resource_type": "Microsoft.MachineLearningServices/workspaces/onlineEndpoints", "value_contains": "SystemAssigned" }

emit

source type	`Compute`
target type	`ManagedIdentity`
source	`<online endpoint (API)>`
target	`<system-assigned MI (identity.principalId on the endpoint)>`

Narrative

AML online endpoint {endpoint.name} (SystemAssigned) executes as managed identity {mi.principalId}.

Raw rule rules/explicit/azure-machinelearning.yaml

id: azure-aml-online-endpoint-executes-as-system-mi
emits: ExecutesAs
applies_to:
- azure
match_record:
  resource_type: Microsoft.MachineLearningServices/workspaces/onlineEndpoints
  field: identity.type
  value_contains: SystemAssigned
emit:
  source_type: Compute
  target_type: ManagedIdentity
  source: <online endpoint (API)>
  target: <system-assigned MI (identity.principalId on the endpoint)>
  api_source: GET /...workspaces/{ws}/onlineEndpoints/{ep}
  evidence_field: identity.type + identity.principalId
  narrative: AML online endpoint {endpoint.name} (SystemAssigned) executes as managed identity {mi.principalId}.