rage.fail

azure-vnet-resource-in-subnet

explicit azure emits LocatedIn

match (record)

{ "field": "properties.ipConfigurations[].subnet.id", "resource_type": "Microsoft.Network/networkInterfaces" }

emit

source type	`Compute`
target type	`Subnet`
source	`<compute resource attached to this NIC>`
target	`<subnet>`

Narrative

{resource.name} is located in subnet {subnet.name} via its NIC.

Raw rule rules/explicit/azure-vnet.yaml

id: azure-vnet-resource-in-subnet
emits: LocatedIn
applies_to:
- azure
match_record:
  resource_type: Microsoft.Network/networkInterfaces
  field: properties.ipConfigurations[].subnet.id
emit:
  source_type: Compute
  target_type: Subnet
  source: <compute resource attached to this NIC>
  target: <subnet>
  api_source: Microsoft.Network/networkInterfaces GET
  evidence_field: properties.ipConfigurations[].subnet.id
  narrative: '{resource.name} is located in subnet {subnet.name} via its NIC.'