rage.fail

azure-la-mi-attached

explicit azure emits AttachedTo

match (record)

{ "field": "identity.userAssignedIdentities", "resource_type": "Microsoft.Logic/workflows" }

where

identity.type in [UserAssigned, 'SystemAssigned, UserAssigned']

emit

source type	`ManagedIdentity`
target type	`Compute`
source	`<user-assigned managed identity>`
target	`<Logic App workflow>`

Narrative

User-assigned MI {mi.name} is attached to Logic App {workflow.name}.

Raw rule rules/explicit/azure-logicapps.yaml

id: azure-la-mi-attached
emits: AttachedTo
applies_to:
- azure
match_record:
  resource_type: Microsoft.Logic/workflows
  field: identity.userAssignedIdentities
where:
- identity.type in [UserAssigned, 'SystemAssigned, UserAssigned']
emit:
  source_type: ManagedIdentity
  target_type: Compute
  source: <user-assigned managed identity>
  target: <Logic App workflow>
  api_source: az rest --method GET --url .../providers/Microsoft.Logic/workflows/<name>
  evidence_field: identity.userAssignedIdentities
  narrative: User-assigned MI {mi.name} is attached to Logic App {workflow.name}.