rage.fail

azure-aml-user-mi-attached-to-compute

explicit azure emits AttachedTo

match (record)

{ "field": "identity.userAssignedIdentities", "resource_type": "Microsoft.MachineLearningServices/workspaces/computes" }

where

identity.type contains UserAssigned

emit

source type	`ManagedIdentity`
target type	`Compute`
source	`<user-assigned MI (keyed by resource ID in identity.userAssignedIdentities)>`
target	`<AML compute cluster or compute instance>`

Narrative

User-assigned MI {mi.name} is attached to AML compute {compute.name}.

Raw rule rules/explicit/azure-machinelearning.yaml

id: azure-aml-user-mi-attached-to-compute
emits: AttachedTo
applies_to:
- azure
match_record:
  resource_type: Microsoft.MachineLearningServices/workspaces/computes
  field: identity.userAssignedIdentities
where:
- identity.type contains UserAssigned
emit:
  source_type: ManagedIdentity
  target_type: Compute
  source: <user-assigned MI (keyed by resource ID in identity.userAssignedIdentities)>
  target: <AML compute cluster or compute instance>
  api_source: GET /...workspaces/{ws}/computes/{name}
  evidence_field: identity.userAssignedIdentities
  narrative: User-assigned MI {mi.name} is attached to AML compute {compute.name}.