rage.fail

azure-appconfig-contains-keyvalue

explicit azure emits Contains

match (record)

{ "field": "key", "resource_type": "Microsoft.AppConfiguration/configurationStores/keyValues" }

emit

source type	`AdministrativeBoundary`
target type	`*`
source	`<configuration store node>`
target	`<key-value node>`

Narrative

{store.name} contains key-value {keyvalue.name}.

Raw rule rules/explicit/azure-appconfig.yaml

id: azure-appconfig-contains-keyvalue
emits: Contains
applies_to:
- azure
match_record:
  resource_type: Microsoft.AppConfiguration/configurationStores/keyValues
  field: key
emit:
  source_type: AdministrativeBoundary
  target_type: '*'
  source: <configuration store node>
  target: <key-value node>
  api_source: az appconfig kv list | data-plane GET /kv
  evidence_field: key/label
  narrative: '{store.name} contains key-value {keyvalue.name}.'