rage.fail

azure-storage-account-contains-container

explicit azure emits Contains

match (record)

{ "field": "id", "resource_type": "Microsoft.Storage/storageAccounts/blobServices/containers" }

emit

source type	`ObjectStorage`
target type	`ObjectStorage`
source	`<storageAccount node>`
target	`<container node>`

Narrative

{account.name} contains blob container {container.name}.

Raw rule rules/explicit/azure-storage.yaml

id: azure-storage-account-contains-container
emits: Contains
applies_to:
- azure
match_record:
  resource_type: Microsoft.Storage/storageAccounts/blobServices/containers
  field: id
emit:
  source_type: ObjectStorage
  target_type: ObjectStorage
  source: <storageAccount node>
  target: <container node>
  api_source: Microsoft.Storage/storageAccounts/blobServices/containers GET
  evidence_field: id
  narrative: '{account.name} contains blob container {container.name}.'