---
inputType: "CA10Z1__CaAzureNetworkWatcherFlowLog__c"
importExtracts:
  - file: /types/CA10Z1__CaAzureNetworkWatcherFlowLog__c/object.extracts.yaml
testData:
  - file: "test-data.json"
conditions:
  - status: "INAPPLICABLE"
    currentStateMessage: "Only applicable to virtual network flow logs."
    check:
      IS_EMPTY_LOOKUP: "CA10Z1__virtualNetwork__r"
  - status: "INCOMPLIANT"
    currentStateMessage: "Virtual network flow logs are disabled."
    remediationMessage: "Enable virtual network flow logs and set retention to 0 or at least 90 days."
    check:
      NOT_EQUAL:
        left:
          EXTRACT: "CA10Z1__logStatus__c"
        right:
          TEXT: "Enabled"
  - status: "INCOMPLIANT"
    currentStateMessage: "Virtual network flow logs retention period is not configured."
    remediationMessage: "Set the retention period to 0 or at least 90 days."
    check:
      IS_EMPTY:
        arg:
          EXTRACT: "CA10Z1__retentionPolicyDays__c"
  - status: "COMPLIANT"
    currentStateMessage: "Virtual network flow logs are enabled and the retention period is set to 0 or at least 90 days."
    check:
      OR:
        args:
          - IS_EQUAL:
              left:
                EXTRACT: "CA10Z1__retentionPolicyDays__c"
              right:
                NUMBER: 0.0
          - AND:
              args:
                - IS_EQUAL:
                    left:
                      EXTRACT: "CA10Z1__retentionPolicyStatus__c"
                    right:
                      TEXT: "Enabled"
                - GREATER_THAN_EQUAL:
                    left:
                      EXTRACT: "CA10Z1__retentionPolicyDays__c"
                    right:
                      NUMBER: 90.0
otherwise:
  status: "INCOMPLIANT"
  currentStateMessage: "Virtual network flow logs retention period is less than 90 days."
  remediationMessage: "Set the retention period to 0 or at least 90 days."