rage.fail

azure-appconfig-connstring-credentials-for-dataplane

explicit azure emits CredentialsFor

match (record)

{ "field": "properties.disableLocalAuth", "resource_type": "Microsoft.AppConfiguration/configurationStores" }

where

properties.disableLocalAuth == false

emit

source	`<access-key connection string Credential node>`
target	`<store data plane (all key-values)>`

Narrative

The access-key connection string of {store.name} authenticates to its full data plane (all key-values).

Raw rule rules/explicit/azure-appconfig.yaml

id: azure-appconfig-connstring-credentials-for-dataplane
emits: CredentialsFor
applies_to:
- azure
match_record:
  resource_type: Microsoft.AppConfiguration/configurationStores
  field: properties.disableLocalAuth
where:
- properties.disableLocalAuth == false
emit:
  source: <access-key connection string Credential node>
  target: <store data plane (all key-values)>
  api_source: az appconfig show
  evidence_field: properties.disableLocalAuth == false
  narrative: The access-key connection string of {store.name} authenticates to its full data plane (all
    key-values).