rage.fail

azure-evg-rg-contains-systemtopic

explicit azure emits Contains

match (record)

{ "field": "id", "resource_type": "Microsoft.EventGrid/systemTopics" }

emit

source type	`AdministrativeBoundary`
target type	`*`
source	`<resource group from id>`
target	`<Event Grid system topic>`

Narrative

{rg.name} contains Event Grid system topic {topic.name}.

Raw rule rules/explicit/azure-eventgrid.yaml

id: azure-evg-rg-contains-systemtopic
emits: Contains
applies_to:
- azure
match_record:
  resource_type: Microsoft.EventGrid/systemTopics
  field: id
emit:
  source_type: AdministrativeBoundary
  target_type: '*'
  source: <resource group from id>
  target: <Event Grid system topic>
  api_source: GET /subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.EventGrid/systemTopics
  evidence_field: id
  narrative: '{rg.name} contains Event Grid system topic {topic.name}.'