rage.fail

azure-storage-allow-public-access-property

explicit azure emits HasPolicy

match (record)

{ "field": "properties.allowBlobPublicAccess", "resource_type": "Microsoft.Storage/storageAccounts" }

emit

source type	`ObjectStorage`
target type	`Policy`
source	`<storageAccount node>`
target	`<networkAcls/publicAccess ResourcePolicy node>`

Narrative

{account.name} has allowBlobPublicAccess={value}. When false, all container-level publicAccess settings are ignored by the service.

Raw rule rules/explicit/azure-storage.yaml

id: azure-storage-allow-public-access-property
emits: HasPolicy
applies_to:
- azure
match_record:
  resource_type: Microsoft.Storage/storageAccounts
  field: properties.allowBlobPublicAccess
emit:
  source_type: ObjectStorage
  target_type: Policy
  source: <storageAccount node>
  target: <networkAcls/publicAccess ResourcePolicy node>
  api_source: Microsoft.Storage/storageAccounts GET
  evidence_field: properties.allowBlobPublicAccess
  narrative: '{account.name} has allowBlobPublicAccess={value}. When false, all container-level publicAccess
    settings are ignored by the service.'