rage.fail

gcp-ncc-hub-located-in-project

explicit gcp emits LocatedIn

match (record)

{ "api": "networkconnectivity.projects.locations.global.hubs.list", "resource_type": "networkconnectivity.googleapis.com/Hub" }

emit

source type	`TransitGateway`
target type	`Project`
source	`<NCC Hub node — node_id derived from hub.name>`
target	`<Project node — project extracted from hub.name segment>`

Narrative

{hub.name} is a Network Connectivity Center Hub (TransitGateway) located in project {project.name}. It forms the central routing domain for all attached spokes.

Raw rule rules/explicit/gcp-ncc.yaml

id: gcp-ncc-hub-located-in-project
emits: LocatedIn
applies_to:
- gcp
match_record:
  api: networkconnectivity.projects.locations.global.hubs.list
  resource_type: networkconnectivity.googleapis.com/Hub
emit:
  source_type: TransitGateway
  target_type: Project
  source: "<NCC Hub node \u2014 node_id derived from hub.name>"
  target: "<Project node \u2014 project extracted from hub.name segment>"
  api_source: networkconnectivity.projects.locations.global.hubs.list
  evidence_field: hub.name
  narrative: '{hub.name} is a Network Connectivity Center Hub (TransitGateway) located in project {project.name}.
    It forms the central routing domain for all attached spokes.'