rage.fail

azure-nsg-located-in-nic

explicit azure emits LocatedIn

match (record)

{ "field": "properties.networkInterfaces[*].id", "resource_type": "Microsoft.Network/networkSecurityGroups" }

emit

source type	`Firewall`
target type	`Network`
source	`<NSG Firewall node>`
target	`<NetworkInterface node (Network class) referenced by properties.networkInterfaces[*].id>`

Narrative

NSG {nsg.name} is associated with network interface {nic.name}.

Raw rule rules/explicit/azure-nsg.yaml

id: azure-nsg-located-in-nic
emits: LocatedIn
applies_to:
- azure
match_record:
  resource_type: Microsoft.Network/networkSecurityGroups
  field: properties.networkInterfaces[*].id
emit:
  source_type: Firewall
  target_type: Network
  source: <NSG Firewall node>
  target: <NetworkInterface node (Network class) referenced by properties.networkInterfaces[*].id>
  api_source: ARM GET /networkSecurityGroups/{name} or az network nsg show
  evidence_field: properties.networkInterfaces[*].id
  narrative: NSG {nsg.name} is associated with network interface {nic.name}.