rage.fail

gcp-firewall-located-in-network

explicit gcp emits LocatedIn

match (record)

{ "field": "network", "resource_type": "compute.googleapis.com/Firewall" }

emit

source type	`Firewall`
target type	`Network`
source	`<Firewall rule node (Firewall class)>`
target	`<VirtualNetwork node (Network class) referenced by firewall.network self-link>`

Narrative

Firewall rule {firewall.name} is applied in VPC network {network.name}.

Raw rule rules/explicit/gcp-firewall.yaml

id: gcp-firewall-located-in-network
emits: LocatedIn
applies_to:
- gcp
match_record:
  resource_type: compute.googleapis.com/Firewall
  field: network
emit:
  source_type: Firewall
  target_type: Network
  source: <Firewall rule node (Firewall class)>
  target: <VirtualNetwork node (Network class) referenced by firewall.network self-link>
  api_source: compute.firewalls.list / compute.firewalls.get
  evidence_field: network
  narrative: Firewall rule {firewall.name} is applied in VPC network {network.name}.