rage.fail

gcp-psc-service-attachment-has-policy

explicit gcp emits HasPolicy

match (record)

{ "field": "connectionPreference", "resource_type": "compute.googleapis.com/ServiceAttachment" }

emit

source type	`PrivateEndpoint`
target type	`Policy`
source	`<ServiceAttachment node>`
target	`<ResourcePolicy node for this ServiceAttachment>`

Narrative

{service_attachment.name} has a connection policy (connectionPreference={value}, consumerAcceptLists={list}).

Raw rule rules/explicit/gcp-psc.yaml

id: gcp-psc-service-attachment-has-policy
emits: HasPolicy
applies_to:
- gcp
match_record:
  resource_type: compute.googleapis.com/ServiceAttachment
  field: connectionPreference
emit:
  source_type: PrivateEndpoint
  target_type: Policy
  source: <ServiceAttachment node>
  target: <ResourcePolicy node for this ServiceAttachment>
  api_source: compute.serviceAttachments.get
  evidence_field: connectionPreference | consumerAcceptLists
  narrative: '{service_attachment.name} has a connection policy (connectionPreference={value}, consumerAcceptLists={list}).'