rage.fail

azure-storage-account-in-rg

explicit azure emits Contains

match (record)

{ "field": "id", "resource_type": "Microsoft.Storage/storageAccounts" }

emit

source type	`AdministrativeBoundary`
target type	`ObjectStorage`
source	`<ResourceGroup node>`
target	`<storageAccount node>`

Narrative

{rg.name} contains storage account {account.name}.

Raw rule rules/explicit/azure-storage.yaml

id: azure-storage-account-in-rg
emits: Contains
applies_to:
- azure
match_record:
  resource_type: Microsoft.Storage/storageAccounts
  field: id
emit:
  source_type: AdministrativeBoundary
  target_type: ObjectStorage
  source: <ResourceGroup node>
  target: <storageAccount node>
  api_source: Microsoft.Storage/storageAccounts GET (list)
  evidence_field: id
  narrative: '{rg.name} contains storage account {account.name}.'