rage.fail

gcp-psc-forwarding-rule-located-in-network

explicit gcp emits LocatedIn

match (record)

{ "field": "network", "resource_type": "compute.googleapis.com/ForwardingRule" }

where

forwardingRule.purpose == PRIVATE_SERVICE_CONNECT

emit

source type	`PrivateEndpoint`
target type	`VirtualNetwork`
source	`<PSC ForwardingRule node>`
target	`<VirtualNetwork node referenced by forwardingRule.network>`

Narrative

PSC consumer endpoint {forwarding_rule.name} is placed in VPC {network.name} (forwardingRule.network).

Raw rule rules/explicit/gcp-psc.yaml

id: gcp-psc-forwarding-rule-located-in-network
emits: LocatedIn
applies_to:
- gcp
match_record:
  resource_type: compute.googleapis.com/ForwardingRule
  field: network
where:
- forwardingRule.purpose == PRIVATE_SERVICE_CONNECT
emit:
  source_type: PrivateEndpoint
  target_type: VirtualNetwork
  source: <PSC ForwardingRule node>
  target: <VirtualNetwork node referenced by forwardingRule.network>
  api_source: compute.forwardingRules.get
  evidence_field: network
  narrative: PSC consumer endpoint {forwarding_rule.name} is placed in VPC {network.name} (forwardingRule.network).