rage.fail

gcp-memorystore-explicit-network-located-in

explicit gcp emits LocatedIn

match (record)

{ "field": "authorizedNetwork", "resource_type": "google.redis.Instance" }

emit

source type	`Cache`
target type	`Network`
source	`<Memorystore Cache instance node>`
target	`<VirtualNetwork node>`

Narrative

{instance.name} is peered into VPC {network.name} at IP {instance.host}:{instance.port}. In-VPC clients with network reach to this IP can connect to the Redis data plane.

Raw rule rules/explicit/gcp-memorystore.yaml

id: gcp-memorystore-explicit-network-located-in
emits: LocatedIn
applies_to:
- gcp
match_record:
  resource_type: google.redis.Instance
  field: authorizedNetwork
emit:
  source_type: Cache
  target_type: Network
  source: <Memorystore Cache instance node>
  target: <VirtualNetwork node>
  api_source: redis.instances.get
  evidence_field: authorizedNetwork
  narrative: '{instance.name} is peered into VPC {network.name} at IP {instance.host}:{instance.port}.
    In-VPC clients with network reach to this IP can connect to the Redis data plane.'