rage.fail

azure-kv-network-acls

explicit azure emits HasPolicy

match (record)

{ "field": "properties.networkAcls", "resource_type": "Microsoft.KeyVault/vaults" }

emit

source type	`*`
target type	`Policy`
source	`<vault node>`
target	`<network ACL config>`

Narrative

{vault.name} network default action is {value} (publicNetworkAccess={publicNetworkAccess}).

Raw rule rules/explicit/azure-keyvault.yaml

id: azure-kv-network-acls
emits: HasPolicy
applies_to:
- azure
match_record:
  resource_type: Microsoft.KeyVault/vaults
  field: properties.networkAcls
emit:
  source_type: '*'
  target_type: Policy
  source: <vault node>
  target: <network ACL config>
  api_source: Microsoft.KeyVault/vaults GET
  evidence_field: properties.networkAcls.defaultAction
  narrative: '{vault.name} network default action is {value} (publicNetworkAccess={publicNetworkAccess}).'