rage.fail

azure-storage-container-public-access-property

explicit azure emits HasPolicy

match (record)

{ "field": "properties.publicAccess", "resource_type": "Microsoft.Storage/storageAccounts/blobServices/containers" }

where

properties.publicAccess in ['Blob', 'Container']

emit

source type	`ObjectStorage`
target type	`Policy`
source	`<container node>`
target	`<publicAccess ResourcePolicy node>`

Narrative

Container {container.name} has publicAccess={value} (Blob=anonymous blob read; Container=anonymous list+read).

Raw rule rules/explicit/azure-storage.yaml

id: azure-storage-container-public-access-property
emits: HasPolicy
applies_to:
- azure
match_record:
  resource_type: Microsoft.Storage/storageAccounts/blobServices/containers
  field: properties.publicAccess
where:
- properties.publicAccess in ['Blob', 'Container']
emit:
  source_type: ObjectStorage
  target_type: Policy
  source: <container node>
  target: <publicAccess ResourcePolicy node>
  api_source: Microsoft.Storage/storageAccounts/blobServices/containers GET
  evidence_field: properties.publicAccess
  narrative: Container {container.name} has publicAccess={value} (Blob=anonymous blob read; Container=anonymous
    list+read).