-
Notifications
You must be signed in to change notification settings - Fork 33
Expand file tree
/
Copy pathazure.lr
More file actions
2524 lines (2389 loc) · 77 KB
/
azure.lr
File metadata and controls
2524 lines (2389 loc) · 77 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
// Copyright (c) Mondoo, Inc.
// SPDX-License-Identifier: BUSL-1.1
option provider = "go.mondoo.com/cnquery/v9/providers/azure"
option go_package = "go.mondoo.com/cnquery/v12/providers/azure/resources"
// Azure resource
azure {
}
// Azure subscription
azure.subscription @defaults ("name") {
// Full resource identifier of the subscription
id string
// Name of the subscription
name string
// Subscription identifier
subscriptionId string
// Subscription tenant identifier
tenantId string
// List of tenants that manage the subscription
managedByTenants []string
// Subscription tags
tags map[string]string
// Subscription state
state string
// Subscription authorization source
authorizationSource string
// Subscription policies
subscriptionsPolicies dict
// All resources in a subscription
resources() []azure.subscription.resource
// Resource groups in the subscription
resourceGroups() []azure.subscription.resourcegroup
// Compute resources in the subscription
compute() azure.subscription.computeService
// Batch resources in the subscription
batch() azure.subscription.batchService
// Databricks resources in the subscription
databricks() azure.subscription.databricksService
// Network resources in the subscription
network() azure.subscription.networkService
// Storage resources in the subscription
storage() azure.subscription.storageService
// Web resources in the subscription
web() azure.subscription.webService
// SQL resources in the subscription
sql() azure.subscription.sqlService
// MySQL resources inside the subscription
mySql() azure.subscription.mySqlService
// PostgreSQL resources in the subscription
postgreSql() azure.subscription.postgreSqlService
// MariaDB resources in the subscription
mariaDb() azure.subscription.mariaDbService
// Cosmos DB resources in the subscription
cosmosDb() azure.subscription.cosmosDbService
// Azure Key Vault resources in the subscription
keyVault() azure.subscription.keyVaultService
// Authorization resources in the subscription
iam() azure.subscription.authorizationService
// Monitor resources in the subscription
monitor() azure.subscription.monitorService
// Cloud defender resources in the subscription
cloudDefender() azure.subscription.cloudDefenderService
// AKS resources in the subscription
aks() azure.subscription.aksService
// Advisor resources in the subscription
advisor() azure.subscription.advisorService
// Policy service in the subscription
policy azure.subscription.policy
// IoT resources in the subscription
iot() azure.subscription.iotService
// Cache resources in the subscription
cache() azure.subscription.cacheService
}
// Azure function
private azure.subscription.webService.function @defaults("name type") {
// ID of the function
id string
// Name of the function
name string
// Type of function
type string
// Kind of function
kind string
// Properties for the function
properties dict
}
// Azure resource group
private azure.subscription.resourcegroup @defaults("name location") {
// Resource group ID
id string
// Resource group name
name string
// Resource group location
location string
// Resource group tags
tags map[string]string
// Resource group type
type string
// ID of the resource that manages this resource group
managedBy string
// Resource group provisioning state
provisioningState string
}
// Azure resource
private azure.subscription.resource @defaults("id name location") {
// Resource ID
id string
// Resource name
name string
// Resource kind
kind string
// Resource location
location string
// Resource tags
tags map[string]string
// Resource type
type string
// ID of the resource that manages this resource
managedBy string
// Resource SKU
sku dict
// Resource plan
plan dict
// Resource identity
identity dict
// Resource provisioning state
provisioningState string
// When the resource was created
createdTime time
// When the resource was last changed
changedTime time
}
// Azure Compute
private azure.subscription.computeService {
// Subscription identifier
subscriptionId string
// All compute instances under a subscription
vms() []azure.subscription.computeService.vm
// All the disks under a subscription
disks() []azure.subscription.computeService.disk
}
// Azure Compute virtual machine
azure.subscription.computeService.vm @defaults("name location properties.hardwareProfile.vmSize properties.storageProfile.osDisk.osType") {
// VM ID
id string
// VM name
name string
// VM location
location string
// VM zones
zones []string
// VM state
state() string
// Whether the VM is running
isRunning() bool
// VM tags
tags map[string]string
// VM type
type string
// VM properties
properties dict
// VM extension
extensions() []dict
// VM compute disk
osDisk() azure.subscription.computeService.disk
// VM compute data disk
dataDisks() []azure.subscription.computeService.disk
// VM public IP addresses
publicIpAddresses() []azure.subscription.networkService.ipAddress
}
// Azure compute disk resource
azure.subscription.computeService.disk @defaults("name location properties.osType properties.diskSizeGB properties.diskState") {
// Disk resource ID
id string
// Disk resource name
name string
// Disk resource location
location string
// Disk resource tags
tags map[string]string
// Disk resource type
type string
// A relative URI containing the ID of the VM that has the disk attached
managedBy string
// List of relative URIs containing the IDs of the VMs that have the disk attached
managedByExtended []string
// The logical zone list for disk
zones []string
// The disk SKU name and tier
sku dict
// Disk resource properties
properties dict
}
// Azure Batch
private azure.subscription.batchService {
// Subscription identifier
subscriptionId string
// Batch accounts in the subscription
accounts() []azure.subscription.batchService.account
}
// Azure Batch account
azure.subscription.batchService.account @defaults("id name location") {
// Batch account ID
id string
// Batch account name
name string
// Batch account location
location string
// Batch account tags
tags map[string]string
// Batch account type
type string
// Batch account identity
identity dict
// Batch account properties
properties dict
// Batch account endpoint
accountEndpoint string
// Batch account provisioning state
provisioningState string
// Batch account pool allocation mode
poolAllocationMode string
// Batch account public network access level
publicNetworkAccess string
// Batch account node management endpoint
nodeManagementEndpoint string
// Batch account active job and job schedule quota
activeJobAndJobScheduleQuota int
// Batch account dedicated core quota
dedicatedCoreQuota int
// Whether dedicated core quota per VM family is enforced
dedicatedCoreQuotaPerVmFamilyEnforced bool
// Batch account dedicated core quota per VM family
dedicatedCoreQuotaPerVmFamily []dict
// Batch account low priority core quota
lowPriorityCoreQuota int
// Batch account pool quota
poolQuota int
// Batch account allowed authentication modes
allowedAuthenticationModes []string
// Batch account auto storage settings
autoStorage dict
// Batch account encryption settings
encryption dict
// Batch account key vault reference
keyVaultReference dict
// Batch account network profile
networkProfile dict
// Batch account private endpoint connections
privateEndpointConnections []dict
// Batch account pools
pools() []azure.subscription.batchService.account.pool
// Batch account diagnostic settings
diagnosticSettings() []azure.subscription.monitorService.diagnosticsetting
}
// Azure Batch pool
azure.subscription.batchService.account.pool @defaults("id name") {
// Pool resource ID
id string
// Pool name
name string
// Pool resource type
type string
// Pool etag
etag string
// Pool identity configuration
identity dict
// Pool configuration settings including scale, network, and task scheduling options
properties dict
// Pool provisioning state
provisioningState string
// Pool virtual machine size
vmSize string
// Pool deployment configuration
deploymentConfiguration dict
// Pool virtual machine configuration
virtualMachineConfiguration dict
}
// Azure Databricks
private azure.subscription.databricksService {
// Subscription identifier
subscriptionId string
// Databricks workspaces in the subscription
workspaces() []azure.subscription.databricksService.workspace
}
// Azure Databricks workspace
azure.subscription.databricksService.workspace @defaults("id name location") {
// Workspace ID
id string
// Workspace name
name string
// Workspace location
location string
// Workspace tags
tags map[string]string
// Workspace type
type string
// Workspace properties
properties dict
// Workspace SKU
sku dict
}
// Azure network
private azure.subscription.networkService {
// Subscription identifier
subscriptionId string
// List of network interfaces
interfaces() []azure.subscription.networkService.interface
// List of network security groups
securityGroups() []azure.subscription.networkService.securityGroup
// List of network watchers
watchers() []azure.subscription.networkService.watcher
// List of public IP addresses
publicIpAddresses() []azure.subscription.networkService.ipAddress
// List of Bastion hosts
bastionHosts() []azure.subscription.networkService.bastionHost
// List of load balancers
loadBalancers() []azure.subscription.networkService.loadBalancer
// List of NAT gateways
natGateways() []azure.subscription.networkService.natGateway
// List of virtual networks
virtualNetworks() []azure.subscription.networkService.virtualNetwork
// List of virtual network gateways
virtualNetworkGateways() []azure.subscription.networkService.virtualNetworkGateway
// List of network firewalls
firewalls() []azure.subscription.networkService.firewall
// List of firewall policies
firewallPolicies() []azure.subscription.networkService.firewallPolicy
// List of application security groups
applicationSecurityGroups() []azure.subscription.networkService.appSecurityGroup
// List of application gateways
applicationGateways() []azure.subscription.networkService.applicationGateway
// List of application firewall policies
applicationFirewallPolicies() []azure.subscription.networkService.applicationFirewallPolicy
}
// Azure Virtual Network (VNet) gateway
azure.subscription.networkService.virtualNetworkGateway @defaults("id name location") {
// VNet gateway ID
id string
// VNet gateway name
name string
// VNet gateway location
location string
// VNet gateway tags
tags map[string]string
// VNet gateway resource type
type string
// VNet gateway etag
etag string
// VNet gateway properties
properties dict
// Whether the virtual network gateway is active
active bool
// Whether BGP is enabled for this virtual network gateway
enableBgp bool
// Whether BGP route translation is enabled for this VNet gateway
enableBgpRouteTranslationForNat bool
// Whether DNS forwarding is enabled for this VNet gateway
enableDNSForwarding bool
// Whether private IP must be enabled for connections
enablePrivateIPAddress bool
// Whether IP sec replay protection is disabled for this VNet gateway
disableIPSecReplayProtection bool
// VNet gateway provisioning state
provisioningState string
// The IP address allocated by the gateway to which DNS requests can be sent
inboundDNSForwardingEndpoint string
// VNet gateway SKU name
skuName string
// VNet gateway SKU capacity
skuCapacity int
// A list of address blocks reserved for this virtual network in CIDR notation
addressPrefixes []string
// VNet gateway type
gatewayType string
// VNet gateway generation
vpnGatewayGeneration string
// VNet gateway VPN type
vpnType string
// VNet gateway IP configurations
ipConfigurations []azure.subscription.networkService.virtualNetworkGateway.ipConfig
// VNet gateway BGP settings
bgpSettings azure.subscription.networkService.bgpSettings
// VNet gateway NAT rules
natRules []azure.subscription.networkService.virtualNetworkGateway.natRule
// Applicable connections for the gateway
connections() []azure.subscription.networkService.virtualNetworkGateway.connection
// VPN client configuration (only set if P2S is configured for the gateway)
vpnClientConfiguration dict
}
// Azure network application security group
azure.subscription.networkService.appSecurityGroup @defaults("id name location") {
// Application security group ID
id string
// Application security group name
name string
// Application security group location
location string
// Application security group tags
tags map[string]string
// Application security group type
type string
// Application security group etag
etag string
// Application security group properties
properties dict
}
// Azure network firewall
azure.subscription.networkService.firewall @defaults("id name location") {
// Firewall ID
id string
// Firewall name
name string
// Firewall location
location string
// Firewall tags
tags map[string]string
// Firewall type
type string
// Firewall etag
etag string
// Firewall properties
properties dict
// Firewall provisioning state
provisioningState string
// Firewall SKU name
skuName string
// Firewall SKU tier
skuTier string
// Firewall threat intel mode
threatIntelMode string
// Policy associated with this firewall
policy() azure.subscription.networkService.firewallPolicy
// List of IP configurations for the firewall
ipConfigurations []azure.subscription.networkService.firewall.ipConfig
// The IP configuration used for management traffic
managementIpConfiguration azure.subscription.networkService.firewall.ipConfig
// List of network rules for the firewall
networkRules []azure.subscription.networkService.firewall.networkRule
// List of NAT rules for the firewall
natRules []azure.subscription.networkService.firewall.natRule
// List of application rules for the firewall
applicationRules []azure.subscription.networkService.firewall.applicationRule
}
// Azure network firewall IP configuration
private azure.subscription.networkService.firewall.ipConfig @defaults("id name") {
// Firewall IP configuration ID
id string
// Firewall IP configuration name
name string
// Firewall IP configuration etag
etag string
// Firewall IP configuration private IP address
privateIpAddress string
// Firewall IP configuration properties
properties dict
// Public IP address associated with this IP configuration
publicIpAddress() azure.subscription.networkService.ipAddress
// Subnet associated with this IP configuration
subnet() azure.subscription.networkService.subnet
}
// Azure network firewall network rule
private azure.subscription.networkService.firewall.networkRule @defaults("id name") {
// Firewall network rule ID
id string
// Firewall network rule name
name string
// Firewall network rule etag
etag string
// Firewall network rule properties
properties dict
}
// Azure network firewall application rule
private azure.subscription.networkService.firewall.applicationRule @defaults("id name") {
// Firewall application rule ID
id string
// Firewall application rule name
name string
// Firewall application rule etag
etag string
// Firewall application rule properties
properties dict
}
// Azure network firewall NAT rule
private azure.subscription.networkService.firewall.natRule @defaults("id name") {
// Firewall NAT rule ID
id string
// Firewall NAT rule name
name string
// Firewall NAT rule etag
etag string
// Firewall NAT rule properties
properties dict
}
// Azure network firewall policy
azure.subscription.networkService.firewallPolicy @defaults("id name location") {
// Firewall policy ID
id string
// Firewall policy name
name string
// Firewall policy location
location string
// Firewall policy tags
tags map[string]string
// Firewall policy type
type string
// Firewall policy etag
etag string
// Firewall policy properties
properties dict
// Firewall policy provisioning state
provisioningState string
// The parent firewall policy from which rules are inherited
basePolicy() azure.subscription.networkService.firewallPolicy
// List of child policies this policy is associated with
childPolicies() []azure.subscription.networkService.firewallPolicy
// List of firewalls the policy is associated with
firewalls() []azure.subscription.networkService.firewall
}
// Azure Virtual Network (VNet) gateway IP configuration
private azure.subscription.networkService.virtualNetworkGateway.ipConfig @defaults("id name") {
// VNet gateway IP Configuration ID
id string
// VNet gateway IP Configuration name
name string
// VNet gateway IP Configuration etag
etag string
// VNet gateway IP Configuration private IP address
privateIpAddress string
// VNet gateway IP Configuration properties
properties dict
// The public IP address, associated with this IP configuration
publicIpAddress() azure.subscription.networkService.ipAddress
}
// Azure Virtual Network (VNet) gateway connection
private azure.subscription.networkService.virtualNetworkGateway.connection @defaults("id name") {
// VNet gateway connection ID
id string
// VNet gateway Connection name
name string
// VNet gateway Connection type
type string
// VNet gateway Connection etag
etag string
// VNet gateway Connection properties
properties dict
}
// Azure network BGP settings
private azure.subscription.networkService.bgpSettings @defaults("asn bgpPeeringAddress") {
// BGP Settings ID
id string
// BGP Settings speaker ASN
asn int
// The BGP peering address and BGP identifier of this BGP speaker
bgpPeeringAddress string
// The weight added to routes learned from this BGP speaker
peerWeight int
// The BGP peering addresses with IP configuration
bgpPeeringAddressesConfig []azure.subscription.networkService.bgpSettings.ipConfigurationBgpPeeringAddress
}
// Azure BGP settings IP configuration
private azure.subscription.networkService.bgpSettings.ipConfigurationBgpPeeringAddress @defaults("defaultBgpIpAddresses") {
// BGP Settings IP Configuration ID
id string
// BGP Settings IP Configuration custom BGP IP addresses
customBgpIpAddresses []string
// BGP Settings IP Configuration ID
ipConfigurationId string
// BGP Settings IP Configuration default BGP IP addresses
defaultBgpIpAddresses []string
// BGP Settings IP Configuration tunnel public BGP IP addresses
tunnelIpAddresses []string
}
// Azure NAT gateway
azure.subscription.networkService.natGateway @defaults("id name location") {
// NAT Gateway ID
id string
// NAT Gateway name
name string
// NAT Gateway location
location string
// NAT Gateway tags
tags map[string]string
// NAT Gateway type
type string
// NAT Gateway etag
etag string
// NAT Gateway properties
properties dict
// NAT Gateway availability zones
zones []string
// List of public IP addresses the NAT Gateway is associated with
publicIpAddresses() []azure.subscription.networkService.ipAddress
// List of subnets the NAT Gateway is associated with
subnets() []azure.subscription.networkService.subnet
}
// Azure Virtual Network (VNet) subnet
azure.subscription.networkService.subnet @defaults("id name addressPrefix") {
// Subnet ID
id string
// Subnet name
name string
// Subnet type
type string
// Subnet etag
etag string
// Subnet address prefix
addressPrefix string
// Subnet properties
properties dict
// The NAT gateway this subnet is associated with, if any
natGateway() azure.subscription.networkService.natGateway
// List of IP configurations for the subnet
ipConfigurations() []azure.subscription.networkService.virtualNetworkGateway.ipConfig
}
// Azure Virtual network (VNet)
azure.subscription.networkService.virtualNetwork @defaults("id name location") {
// Virtual Network ID
id string
// Virtual Network name
name string
// Virtual Network location
location string
// Virtual Network tags
tags map[string]string
// Virtual Network type
type string
// Virtual Network etag
etag string
// Virtual Network properties
properties dict
// List of subnets within the virtual network
subnets []azure.subscription.networkService.subnet
// Virtual Network DHCP options
dhcpOptions azure.subscription.networkService.virtualNetwork.dhcpOptions
// Whether DDoS protection is enabled for all the protected resources in the virtual network
enableDdosProtection bool
// Whether VM protection is enabled for all the subnets in the virtual network
enableVmProtection bool
}
// Azure Virtual Network (VNet) DHCP options
private azure.subscription.networkService.virtualNetwork.dhcpOptions {
// DHCP options ID
id string
// The DNS servers, used by the virtual network
dnsServers []string
}
// Azure Load Balancer
azure.subscription.networkService.loadBalancer @defaults("id name location") {
// Load Balancer ID
id string
// Load Balancer name
name string
// Load Balancer location
location string
// Load Balancer tags
tags map[string]string
// Load Balancer type
type string
// Load Balancer properties
properties dict
// Load Balancer etag
etag string
// Load Balancer SKU
sku string
// List of Load Balancer probes
probes []azure.subscription.networkService.probe
// List of Load Balancer backend address pools
backendPools []azure.subscription.networkService.backendAddressPool
// List of Load Balancer frontend IP configurations
frontendIpConfigs []azure.subscription.networkService.frontendIpConfig
// List of Load Balancer inbound NAT pools
inboundNatPools []azure.subscription.networkService.inboundNatPool
// List of Load Balancer inbound NAT rules
inboundNatRules []azure.subscription.networkService.inboundNatRule
// List of Load Balancer outbound rules
outboundRules []azure.subscription.networkService.outboundRule
// List of Load Balancer rules
loadBalancerRules []azure.subscription.networkService.loadBalancerRule
}
// Azure network probe
private azure.subscription.networkService.probe @defaults("id name"){
// Probe ID
id string
// Probe name
name string
// Probe type
type string
// Probe etag
etag string
// Probe properties
properties dict
}
// Azure network backend address pool
private azure.subscription.networkService.backendAddressPool @defaults("id name") {
// Backend Address Pool ID
id string
// Backend Address Pool name
name string
// Backend Address Pool type
type string
// Backend Address Pool etag
etag string
// Backend Address Pool properties
properties dict
}
// Azure network inbound NAT pool
private azure.subscription.networkService.inboundNatPool @defaults("id name") {
// Inbound NAT Pool ID
id string
// Inbound NAT Pool name
name string
// Inbound NAT Pool type
type string
// Inbound NAT Pool etag
etag string
// Inbound NAT Pool properties
properties dict
}
// Azure network inbound NAT rule
private azure.subscription.networkService.inboundNatRule @defaults("id name") {
// Inbound NAT Rule ID
id string
// Inbound NAT Rule name
name string
// Inbound NAT Rule type
type string
// Inbound NAT Rule etag
etag string
// Inbound NAT Rule properties
properties dict
}
// Azure network frontend IP configuration
private azure.subscription.networkService.frontendIpConfig @defaults("id name") {
// Frontend IP Configuration ID
id string
// Frontend IP Configuration name
name string
// Frontend IP Configuration type
type string
// Frontend IP Configuration etag
etag string
// Frontend IP Configuration properties
properties dict
// Frontend IP Configuration zones
zones []string
}
// Azure Load Balancer rule
private azure.subscription.networkService.loadBalancerRule @defaults("id name") {
// Load Balancer rule ID
id string
// Load Balancer rule name
name string
// Load Balancer rule type
type string
// Load Balancer rule etag
etag string
// Load Balancer rule properties
properties dict
}
// Azure network outbound rule
private azure.subscription.networkService.outboundRule @defaults("id name") {
// Outbound rule ID
id string
// Outbound rule name
name string
// Outbound rule type
type string
// Outbound rule etag
etag string
// Outbound rule properties
properties dict
}
// Azure network interface
azure.subscription.networkService.interface @defaults("name location properties.macAddress properties.nicType") {
// Network interface ID
id string
// Network interface name
name string
// Network interface name
location string
// Network interface tags
tags map[string]string
// Network interface type
type string
// Network interface etag
etag string
// Network interface properties
properties dict
// Network interface compute vm
vm() azure.subscription.computeService.vm
}
// Azure network IP address
private azure.subscription.networkService.ipAddress @defaults("name location ipAddress") {
// IP address ID
id string
// IP address name
name string
// IP address location
location string
// IP address tags
tags map[string]string
// IP address
ipAddress string
// IP address type
type string
}
// Azure Network Bastion host
private azure.subscription.networkService.bastionHost @defaults("id name location") {
// Bastion Host ID
id string
// Bastion Host name
name string
// Bastion Host location
location string
// Bastion Host tags
tags map[string]string
// Bastion Host type
type string
// Bastion host properties
properties dict
// Bastion host SKU
sku dict
}
// Azure network security group
private azure.subscription.networkService.securityGroup @defaults("id name location") {
// Security group ID
id string
// Security group name
name string
// Security group location
location string
// Security group tags
tags map[string]string
// Security group type
type string
// Security group etag
etag string
// Security group properties
properties dict
// Security group interfaces
interfaces []azure.subscription.networkService.interface
// Security group rules
securityRules []azure.subscription.networkService.securityrule
// Security group default security rules
defaultSecurityRules []azure.subscription.networkService.securityrule
}
// Azure network security rule
private azure.subscription.networkService.securityrule @defaults("id name") {
// Security rule ID
id string
// Security rule name
name string
// Security rule etag
etag string
// Security rule properties
properties dict
// Security rule destination port range
destinationPortRange []dict
// Security rule direction (outbound or inbound)
direction string
}
// Azure Network Watcher
private azure.subscription.networkService.watcher @defaults("name location") {
// Network watcher ID
id string
// Network watcher name
name string
// Network watcher location
location string
// Network watcher tags
tags map[string]string
// Network watcher type
type string
// Network watcher etag
etag string
// Network watcher properties
properties dict
// Network watcher flow logs
flowLogs() []azure.subscription.networkService.watcher.flowlog
// Network watcher provisioning state
provisioningState string
}
// Azure Network Watcher flow log
private azure.subscription.networkService.watcher.flowlog @defaults("name location") {
// Network watcher flow log ID
id string
// Network watcher flow log name
name string
// Network watcher flow log location
location string
// Network watcher flow log tags
tags map[string]string
// Network watcher flow log type
type string
// Network watcher flow log etag
etag string
// Network watcher flow log provisioning state
provisioningState string
// Whether the network watcher flow log is enabled
enabled bool
// Network watcher flow log storage account identifier
storageAccountId string
// Network watcher flow log target resource identifier
targetResourceId string
// Network watcher flow log target resource guid
targetResourceGuid string
// Network watcher flow log version
version int
// Network watcher flow log format
format string
// Network watcher flow log retention policy
retentionPolicy dict
// Network watcher flow log analytics
analytics dict
}
// Azure Application Gateway
azure.subscription.networkService.applicationGateway @defaults("id name location") {
// Application Gateway ID
id string
// Application Gateway name
name string
// Application Gateway location
location string
// Application Gateway tags
tags map[string]string
// Application Gateway resource type
type string
// Application Gateway etag
etag string
// Application Gateway properties
properties dict
// Gets the attached application firewall policy
policy() azure.subscription.networkService.applicationFirewallPolicy
// WAF configurations
wafConfiguration() []azure.subscription.networkService.wafConfig
}
// Azure Application Firewall Config
azure.subscription.networkService.wafConfig @defaults("id name type") {
// ID of the WAF configuration
id string
// Name of the WAF configuration
name string
// Type of WAF configuration
type string
// Kind of WAF configuration
kind string
// Properties for the WAF configuration
properties dict
}
// Azure Application Firewall Policy (WAF)
azure.subscription.networkService.applicationFirewallPolicy @defaults("id name location") {