Skip to content

Commit f7e7392

Browse files
silverhacksilverhack
committed
update conditions
1 parent cfbec87 commit f7e7392

17 files changed

Lines changed: 248 additions & 16 deletions

‎rules/conditions/Azure/IAM/azure-non-privileged-roles.json‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
{
2+
filter: [
3+
{
4+
conditions : [
5+
["templateId", "inotmatch", "b24988ac-6180-42a0-ab88-20f7382dd24c"],
6+
["templateId", "inotmatch", "8e3af657-a8ff-443c-a75c-2fe8c4bcb635"],
7+
["templateId", "inotmatch", "a8889054-8d42-49c9-bc1c-52486c10e7cd"],
8+
["templateId", "inotmatch", "f58310d9-a9f6-439a-9e8d-f62e7b41a168"],
9+
["templateId", "inotmatch", "18d7d88d-d35e-4fb5-a5c3-7773c20a72d9"]
10+
],
11+
operator : 'and'
12+
}
13+
]
14+
}

‎rules/conditions/Azure/IAM/azure-privileged-roles.json‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
{
2+
filter: [
3+
{
4+
conditions : [
5+
["templateId", "imatch", "b24988ac-6180-42a0-ab88-20f7382dd24c"],
6+
["templateId", "imatch", "8e3af657-a8ff-443c-a75c-2fe8c4bcb635"],
7+
["templateId", "imatch", "a8889054-8d42-49c9-bc1c-52486c10e7cd"],
8+
["templateId", "imatch", "f58310d9-a9f6-439a-9e8d-f62e7b41a168"],
9+
["templateId", "imatch", "18d7d88d-d35e-4fb5-a5c3-7773c20a72d9"]
10+
],
11+
operator : 'or'
12+
}
13+
]
14+
}

‎rules/conditions/Azure/IAM/subscription-role-permissions.json‎

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,6 @@
22
filter: [
33
{
44
conditions : [
5-
["properties.permissions.actions", "match", "Microsoft.Compute/virtualMachines/delete"],
6-
["properties.permissions.actions", "match", "Microsoft.Compute/virtualMachines/write"],
75
["properties.permissions.actions", "match", "\\*"]
86
],
97
operator : 'or'

‎rules/conditions/Azure/NSG/nsg-allow-tcp.json‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
{
2+
filter: [
3+
{
4+
conditions : [
5+
["properties.protocol", "eq", "*"],
6+
["properties.protocol", "eq", "TCP"]
7+
],
8+
operator : 'or'
9+
}
10+
]
11+
}

‎rules/conditions/Azure/NSG/nsg-allow-udp.json‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
{
2+
filter: [
3+
{
4+
conditions : [
5+
["properties.protocol", "eq", "*"],
6+
["properties.protocol", "eq", "UDP"]
7+
],
8+
operator : 'or'
9+
}
10+
]
11+
}

‎rules/conditions/Azure/NSG/nsg-service-exposed-to-the-internet.json‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
{
2+
operator: 'and',
3+
filter: [
4+
{
5+
conditions : [
6+
["properties.direction", "eq", "Inbound"],
7+
["properties.access", "eq", "Allow"]
8+
],
9+
operator : 'and'
10+
},
11+
{
12+
conditions : [
13+
[ "properties.SourceAddressPrefix", "eq", "*" ],
14+
[ "properties.SourceAddressPrefix", "eq", "Internet" ],
15+
[ "properties.SourceAddressPrefixes", "eq", "*" ],
16+
[ "properties.SourceAddressPrefixes", "eq", "Internet" ]
17+
],
18+
operator : 'or'
19+
}
20+
]
21+
}

‎rules/conditions/Azure/appServices/isAppService.json‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
{
2+
filter: [
3+
{
4+
conditions : [
5+
[
6+
"kind",
7+
"match",
8+
"^(app|app,linux)$"
9+
],
10+
[
11+
"type",
12+
"match",
13+
"^Microsoft\\.Web/sites$"
14+
]
15+
],
16+
"operator":"and"
17+
}
18+
]
19+
}

‎rules/conditions/Azure/appServices/isAppServiceDeploymentSlot.json‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
{
2+
filter: [
3+
{
4+
conditions : [
5+
[
6+
"kind",
7+
"match",
8+
"^(app|app,linux)$"
9+
],
10+
[
11+
"type",
12+
"match",
13+
"^Microsoft\\.Web/sites/slots(/.*)?$"
14+
]
15+
],
16+
"operator":"and"
17+
}
18+
]
19+
}

‎rules/conditions/Azure/appServices/isFunctionApp.json‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
{
2+
filter: [
3+
{
4+
conditions : [
5+
[
6+
"kind",
7+
"match",
8+
"^(functionapp)(,linux)?$"
9+
],
10+
[
11+
"type",
12+
"match",
13+
"^Microsoft\\.Web/sites$"
14+
]
15+
],
16+
"operator":"and"
17+
}
18+
]
19+
}

‎rules/conditions/Azure/appServices/isFunctionAppDeploymentSlot.json‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
{
2+
filter: [
3+
{
4+
conditions : [
5+
[
6+
"kind",
7+
"match",
8+
"^(functionapp)(,linux)?$"
9+
],
10+
[
11+
"type",
12+
"match",
13+
"^Microsoft\\.Web/sites/slots(/.*)?$"
14+
]
15+
],
16+
"operator":"and"
17+
}
18+
]
19+
}

0 commit comments

Comments
 (0)