---
inputType: "CA10Z1__CaAzureDatabricksWorkspace__c"
testData:
  - file: "test-data.json"
importExtracts:
  - file: "/types/CA10Z1__CaAzureDatabricksWorkspace__c/object.extracts.yaml"
conditions:
  - status: "INAPPLICABLE"
    currentStateMessage: "The Databricks workspace is not deployed in a customer-managed virtual network."
    check:
      IS_EMPTY:
        arg:
          EXTRACT: "caJsonText__parametersJsonCustomVirtualNetworkValue__c"
  - status: "INCOMPLIANT"
    currentStateMessage: "The Databricks workspace network subnets do not have NSGs assigned."
    remediationMessage: "Assign NSGs to the subnets."
    check:
      AND:
        args:
          - IS_EMPTY_LOOKUP: "CA10Z1__privateNetworkSubnet__r.CA10__networkSecurityGroup__r"
          - IS_EMPTY_LOOKUP: "CA10Z1__publicNetworkSubnet__r.CA10__networkSecurityGroup__r"
  - status: "INCOMPLIANT"
    currentStateMessage: "The Databricks workspace private subnet does not have an NSG assigned."
    remediationMessage: "Assign an NSG to the subnet."
    check:
      IS_EMPTY_LOOKUP: "CA10Z1__privateNetworkSubnet__r.CA10__networkSecurityGroup__r"
  - status: "INCOMPLIANT"
    currentStateMessage: "The Databricks workspace public subnet does not have an NSG assigned."
    remediationMessage: "Assign an NSG to the subnet."
    check:
      IS_EMPTY_LOOKUP: "CA10Z1__publicNetworkSubnet__r.CA10__networkSecurityGroup__r"
otherwise:
  status: "COMPLIANT"
  currentStateMessage: "The Databricks workspace is configured with a VNet."