π§ Azure Storage Account Shared Key Access is not disabled - prod.logic.yaml π’
- Contextual name: π§ prod.logic.yaml π’
- ID:
/ce/ca/azure/storage/disable-shared-key-access/prod.logic.yaml
- Located in: π Azure Storage Account Shared Key Access is not disabled π’
Flagsβ
- π’ Logic test success
- π’ Logic with extracts
- π’ Logic with test data
Input Typeβ
Type | API Name | Extracts | Extract Files | Logic Files | |
---|---|---|---|---|---|
π | π Azure Storage Account | CA10__CaAzureStorageAccount__c | 27 | 1 | 17 |
Usesβ
Test Results π’β
Generated at: 2025-07-21T17:38:39.436664766Z Open
Result | Id | Condition Index | Condition Text | Runtime Error |
---|---|---|---|---|
π’ | 001 | βοΈ 200 | βοΈ otherwise | βοΈ null |
π’ | 002 | βοΈ 200 | βοΈ otherwise | βοΈ null |
π’ | 003 | βοΈ 199 | βοΈ extract('CA10__sharedKeyAccess__c') == 'Deny' | βοΈ null |
Generationβ
File | MD5 | |
---|---|---|
Open | /ce/ca/azure/storage/disable-shared-key-access/policy.yaml | F9249305DA7289308C9E89E9DA444A37 |
Open | /ce/ca/azure/storage/disable-shared-key-access/prod.logic.yaml | F6356E670450B3FE58E89F09DEB36C86 |
Open | /ce/ca/azure/storage/disable-shared-key-access/test-data.json | 3AD9EB26F3E24D01C0AF43A704B00696 |
Open | /types/CA10__CaAzureStorageAccount__c/object.extracts.yaml | B232DB23A5A5C67EC61EB2635C4A515D |
Generate FULL scriptβ
java -jar repo-manager.jar policies generate FULL /ce/ca/azure/storage/disable-shared-key-access/prod.logic.yaml
Generate DEBUG scriptβ
java -jar repo-manager.jar policies generate DEBUG /ce/ca/azure/storage/disable-shared-key-access/prod.logic.yaml
Generate CAPTURE_TEST_DATA scriptβ
java -jar repo-manager.jar policies generate CAPTURE_TEST_DATA /ce/ca/azure/storage/disable-shared-key-access/prod.logic.yaml
Generate TESTS scriptβ
java -jar repo-manager.jar policies generate TESTS /ce/ca/azure/storage/disable-shared-key-access/prod.logic.yaml
Execute testsβ
java -jar repo-manager.jar policies test /ce/ca/azure/storage/disable-shared-key-access/prod.logic.yaml
Contentβ
---
inputType: "CA10__CaAzureStorageAccount__c"
testData:
- file: test-data.json
importExtracts:
- file: /types/CA10__CaAzureStorageAccount__c/object.extracts.yaml
conditions:
- status: "COMPLIANT"
currentStateMessage: "Shared key access for Azure Storage Account is forbidden."
check:
IS_EQUAL:
left:
EXTRACT: "CA10__sharedKeyAccess__c"
right:
TEXT: "Deny"
otherwise:
status: "INCOMPLIANT"
currentStateMessage: "The storage account permits requests that are authorized with the Shared Key."
remediationMessage: "Disable shared key access for Azure Storage Account."