rage.fail

azure-dbx-access-connector-mi-attached

explicit azure emits AttachedTo

match (record)

{ "field": "identity.userAssignedIdentities", "resource_type": "Microsoft.Databricks/accessConnectors" }

where

identity.type includes UserAssigned

emit

source type	`ManagedIdentity`
target type	`Compute`
source	`<user-assigned MI (ManagedIdentity)>`
target	`<Access Connector>`

Narrative

User-assigned MI {mi.name} is attached to Access Connector {connector.name}.

Raw rule rules/explicit/azure-databricks.yaml

id: azure-dbx-access-connector-mi-attached
emits: AttachedTo
applies_to:
- azure
match_record:
  resource_type: Microsoft.Databricks/accessConnectors
  field: identity.userAssignedIdentities
where:
- identity.type includes UserAssigned
emit:
  source_type: ManagedIdentity
  target_type: Compute
  source: <user-assigned MI (ManagedIdentity)>
  target: <Access Connector>
  api_source: az databricks access-connector show
  evidence_field: identity.userAssignedIdentities
  narrative: User-assigned MI {mi.name} is attached to Access Connector {connector.name}.