๐ง Azure Databricks Workspace network security groups are not configured - prod.logic.yaml๐ข
- Contextual name: ๐ง prod.logic.yaml๐ข
- ID:
/ce/ca/azure/databricks/network-security-groups-for-subnets/prod.logic.yaml - Tags:
- ๐ข Logic test success
- ๐ข Logic with extracts
- ๐ข Logic with test data
Usesโ
- ๐ Azure Databricks Workspace
- ๐ Azure Databricks Workspace - object.extracts.yaml
- ๐งช test-data.json
Test Results ๐ขโ
Generated at: 2025-12-17T01:31:04.136635556Z Open
| Result | Id | Condition Index | Condition Text | Runtime Error |
|---|---|---|---|---|
| ๐ข | 001 | โ๏ธ 99 | โ๏ธ isDisappeared(CA10Z1__disappearanceTime__c) | โ๏ธ null |
| ๐ข | 002 | โ๏ธ 299 | โ๏ธ isEmptyLookup('CA10Z1__privateNetworkSubnet__r.CA10__networkSecurityGroup__r') && isEmptyLookup('CA10Z1__publicNetworkSubnet__r.CA10__networkSecurityGroup__r') | โ๏ธ null |
| ๐ข | 003 | โ๏ธ 399 | โ๏ธ isEmptyLookup('CA10Z1__privateNetworkSubnet__r.CA10__networkSecurityGroup__r') | โ๏ธ null |
| ๐ข | 004 | โ๏ธ 499 | โ๏ธ isEmptyLookup('CA10Z1__publicNetworkSubnet__r.CA10__networkSecurityGroup__r') | โ๏ธ null |
| ๐ข | 005 | โ๏ธ 500 | โ๏ธ otherwise | โ๏ธ null |
Generation Bundleโ
| File | MD5 | |
|---|---|---|
| Open | /ce/ca/azure/databricks/network-security-groups-for-subnets/policy.yaml | BE0AFDDA7DCA0828439D0F49803EA056 |
| Open | /ce/ca/azure/databricks/network-security-groups-for-subnets/prod.logic.yaml | 820CB7613644A40CC5BB267405D812AB |
| Open | /ce/ca/azure/databricks/network-security-groups-for-subnets/test-data.json | 925716927036D26F09A26596BDCF2265 |
| Open | /types/CA10Z1__CaAzureDatabricksWorkspace__c/object.extracts.yaml | 512495ACDA70E3546508F36E8A6F8AAE |
Available Commandsโ
repo-manager policies generate FULL /ce/ca/azure/databricks/network-security-groups-for-subnets/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/azure/databricks/network-security-groups-for-subnets/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/azure/databricks/network-security-groups-for-subnets/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/azure/databricks/network-security-groups-for-subnets/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/azure/databricks/network-security-groups-for-subnets/prod.logic.yaml
Contentโ
---
inputType: "CA10Z1__CaAzureDatabricksWorkspace__c"
testData:
- file: "test-data.json"
importExtracts:
- file: "/types/CA10Z1__CaAzureDatabricksWorkspace__c/object.extracts.yaml"
conditions:
- status: "INAPPLICABLE"
currentStateMessage: "The Databricks Workspace is not deployed in a customer-managed virtual network."
check:
IS_EMPTY:
arg:
EXTRACT: "caJsonText__parametersJsonCustomVirtualNetworkValue__c"
- status: "INCOMPLIANT"
currentStateMessage: "The Databricks Workspace network subnets do not have NSGs assigned."
remediationMessage: "Consider assigning NSGs to the subnets."
check:
AND:
args:
- IS_EMPTY_LOOKUP: "CA10Z1__privateNetworkSubnet__r.CA10__networkSecurityGroup__r"
- IS_EMPTY_LOOKUP: "CA10Z1__publicNetworkSubnet__r.CA10__networkSecurityGroup__r"
- status: "INCOMPLIANT"
currentStateMessage: "The Databricks Workspace private subnet does not have aั NSG assigned."
remediationMessage: "Consider assigning a NSG to the subnet."
check:
IS_EMPTY_LOOKUP: "CA10Z1__privateNetworkSubnet__r.CA10__networkSecurityGroup__r"
- status: "INCOMPLIANT"
currentStateMessage: "The Databricks Workspace public subnet does not have aั NSG assigned."
remediationMessage: "Consider assigning a NSG to the subnet."
check:
IS_EMPTY_LOOKUP: "CA10Z1__publicNetworkSubnet__r.CA10__networkSecurityGroup__r"
otherwise:
status: "COMPLIANT"
currentStateMessage: "The Databricks Workspace is configured with a VNet."