rage.fail

gcp-clouddns-zone-contains-rrset

explicit gcp emits LocatedIn

emit

source type	`DNS`
target type	`DNS`
source	`<Cloud DNS resource record set (RRset)>`
target	`<Cloud DNS managed zone containing the RRset>`

Narrative

DNS resource record set {rrset.name} (type {rrset.type}) is located in (contained by) Cloud DNS zone {zone.name}.

Raw rule rules/explicit/gcp-clouddns.yaml

id: gcp-clouddns-zone-contains-rrset
emits: LocatedIn
applies_to:
- gcp
source_config:
  resource_type: dns.googleapis.com/ManagedZone
  child_resource_type: dns.googleapis.com/ResourceRecordSet
emit:
  source_type: DNS
  target_type: DNS
  source: <Cloud DNS resource record set (RRset)>
  target: <Cloud DNS managed zone containing the RRset>
  api_source: dns.resourceRecordSets.list (GET /dns/v1/projects/{project}/managedZones/{zone}/rrsets)
  evidence_field: name + type + rrdatas
  narrative: DNS resource record set {rrset.name} (type {rrset.type}) is located in (contained by) Cloud
    DNS zone {zone.name}.