rage.fail

azure-dbx-workspace-contains-cluster

explicit azure emits Contains

match (record)

{ "field": "cluster_id", "resource_type": "Databricks::Cluster" }

where

cluster belongs to the parent workspace

emit

source type	`AdministrativeBoundary`
target type	`*`
source	`<Databricks workspace node>`
target	`<cluster node (BatchJob/GenericCompute)>`

Narrative

Databricks workspace {workspace.name} contains cluster {cluster.name}.

Raw rule rules/explicit/azure-databricks.yaml

id: azure-dbx-workspace-contains-cluster
emits: Contains
applies_to:
- azure
match_record:
  resource_type: Databricks::Cluster
  field: cluster_id
where:
- cluster belongs to the parent workspace
emit:
  source_type: AdministrativeBoundary
  target_type: '*'
  source: <Databricks workspace node>
  target: <cluster node (BatchJob/GenericCompute)>
  api_source: GET /api/2.0/clusters/list
  evidence_field: cluster_id
  narrative: Databricks workspace {workspace.name} contains cluster {cluster.name}.