rage.fail

gcp-psc-forwarding-rule-located-in

explicit gcp emits LocatedIn

match (record)

{ "field": "subnetwork", "resource_type": "compute.googleapis.com/ForwardingRule" }

where

forwardingRule.purpose == PRIVATE_SERVICE_CONNECT

emit

source type	`PrivateEndpoint`
target type	`Network`
source	`<PSC ForwardingRule node>`
target	`<Subnet node referenced by forwardingRule.subnetwork>`

Narrative

PSC consumer endpoint {forwarding_rule.name} is placed in subnet {subnet.name} (forwardingRule.subnetwork).

Raw rule rules/explicit/gcp-psc.yaml

id: gcp-psc-forwarding-rule-located-in
emits: LocatedIn
applies_to:
- gcp
match_record:
  resource_type: compute.googleapis.com/ForwardingRule
  field: subnetwork
where:
- forwardingRule.purpose == PRIVATE_SERVICE_CONNECT
emit:
  source_type: PrivateEndpoint
  target_type: Network
  source: <PSC ForwardingRule node>
  target: <Subnet node referenced by forwardingRule.subnetwork>
  api_source: compute.forwardingRules.get (aggregatedList)
  evidence_field: subnetwork
  narrative: PSC consumer endpoint {forwarding_rule.name} is placed in subnet {subnet.name} (forwardingRule.subnetwork).