rage.fail

azure-rediscache-firewall-rule-contains

explicit azure emits Contains

match (record)

{ "parent_type": "Microsoft.Cache/redis", "resource_type": "Microsoft.Cache/redis/firewallRules" }

emit

source type	`Cache`
target type	`Firewall`
source	`<parent Redis cache node (Cache generic_type)>`
target	`<firewall rule node (Firewall generic_type)>`

Narrative

{cache.name} has IP firewall rule {rule.name} restricting data-plane access to the range {startIp}–{endIp}.

Raw rule rules/explicit/azure-rediscache.yaml

id: azure-rediscache-firewall-rule-contains
emits: Contains
applies_to:
- azure
match_record:
  resource_type: Microsoft.Cache/redis/firewallRules
  parent_type: Microsoft.Cache/redis
emit:
  source_type: Cache
  target_type: Firewall
  source: <parent Redis cache node (Cache generic_type)>
  target: <firewall rule node (Firewall generic_type)>
  api_source: GET https://management.azure.com/.../Microsoft.Cache/redis/{name}/firewallRules
  evidence_field: properties.startIpAddress, properties.endIpAddress, name
  narrative: "{cache.name} has IP firewall rule {rule.name} restricting data-plane access to the range\
    \ {startIp}\u2013{endIp}."