rage.fail

azure-dbx-workspace-in-rg

explicit azure emits LocatedIn

match (record)

{ "field": "id", "resource_type": "Microsoft.Databricks/workspaces" }

emit

source type	`AnalyticsService`
target type	`AdministrativeBoundary`
source	`<Databricks workspace node>`
target	`<resource group containing the workspace>`

Narrative

Databricks workspace {workspace.name} is located in resource group {rg.name}.

Raw rule rules/explicit/azure-databricks.yaml

id: azure-dbx-workspace-in-rg
emits: LocatedIn
applies_to:
- azure
match_record:
  resource_type: Microsoft.Databricks/workspaces
  field: id
emit:
  source_type: AnalyticsService
  target_type: AdministrativeBoundary
  source: <Databricks workspace node>
  target: <resource group containing the workspace>
  api_source: az databricks workspace list
  evidence_field: id
  narrative: Databricks workspace {workspace.name} is located in resource group {rg.name}.