rage.fail

azure-dbx-workspace-contains-job

explicit azure emits Contains

match (record)

{ "field": "job_id", "resource_type": "Databricks::Job" }

where

job belongs to the parent workspace

emit

source type	`AdministrativeBoundary`
target type	`*`
source	`<Databricks workspace node>`
target	`<job node (BatchJob)>`

Narrative

Databricks workspace {workspace.name} contains job {job.name}.

Raw rule rules/explicit/azure-databricks.yaml

id: azure-dbx-workspace-contains-job
emits: Contains
applies_to:
- azure
match_record:
  resource_type: Databricks::Job
  field: job_id
where:
- job belongs to the parent workspace
emit:
  source_type: AdministrativeBoundary
  target_type: '*'
  source: <Databricks workspace node>
  target: <job node (BatchJob)>
  api_source: GET /api/2.1/jobs/list
  evidence_field: job_id
  narrative: Databricks workspace {workspace.name} contains job {job.name}.