rage.fail

azure-frontdoor-origin-record

explicit azure emits RoutesTo

where

properties.enabledState == 'Enabled' linked originGroup has at least one origin with properties.hostName non-empty OR sharedPrivateLinkResource not null

emit

source type	`Route`
target type	`PublicEndpoint`
source	`<AFD route node (Route, provider_type: Microsoft.Cdn/profiles/afdEndpoints/routes)>`
target	`<origin resource node (PublicEndpoint for public, PrivateEndpoint for Private Link)>`

Narrative

AFD route {route.name} (endpoint {endpoint.name}) routes to origin {origin.name} ({origin.hostName}).

Raw rule rules/explicit/azure-frontdoor.yaml

id: azure-frontdoor-origin-record
emits: RoutesTo
applies_to:
- azure
source_config:
  resource_type: Microsoft.Cdn/profiles/afdEndpoints/routes
  field: properties
where:
- properties.enabledState == 'Enabled'
- linked originGroup has at least one origin with properties.hostName non-empty OR sharedPrivateLinkResource
  not null
emit:
  source_type: Route
  target_type: PublicEndpoint
  source: '<AFD route node (Route, provider_type: Microsoft.Cdn/profiles/afdEndpoints/routes)>'
  target: <origin resource node (PublicEndpoint for public, PrivateEndpoint for Private Link)>
  api_source: Microsoft.Cdn/profiles/afdEndpoints/routes GET + originGroups/origins GET
  evidence_field: properties.originGroup.id + resolved origin properties.hostName + properties.enabledState
  narrative: AFD route {route.name} (endpoint {endpoint.name}) routes to origin {origin.name} ({origin.hostName}).