Skip to main content

🧠 Azure Subscription Activity Log Alert for Create or Update Security Solution does not exist - prod.logic.yaml 🟢

Flags​

Input Type​

TypeAPI NameExtractsExtract FilesLogic Files
🔒📕 Azure SubscriptionCA10__CaAzureAccount__c13131

Uses​

Test Results 🟢​

Generated at: 2025-04-24T23:46:05.682718075Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟢test1✔️ 200✔️ otherwise✔️ null
🟢test2✔️ 199✔️ CA10__Azure_Activity_Log_Alerts__r.has(COMPLIANT)✔️ null
🟢test3✔️ 200✔️ otherwise✔️ null
🟢test4✔️ 200✔️ otherwise✔️ null
🟢test5✔️ 200✔️ otherwise✔️ null
🟢test6✔️ 200✔️ otherwise✔️ null
🟢test7✔️ 200✔️ otherwise✔️ null
🟢test8✔️ 200✔️ otherwise✔️ null
🟢test9✔️ 200✔️ otherwise✔️ null
🟢test10✔️ 200✔️ otherwise✔️ null
🟢test11✔️ 200✔️ otherwise✔️ null
🟢test12✔️ 200✔️ otherwise✔️ null

Generation​

FileMD5
Open/ce/ca/azure/subscription/activity-log-alert-for-create-or-update-security-solution/policy.yaml2DBADBD02C2E4852C89442F1BD2340EE
Open/ce/ca/azure/subscription/activity-log-alert-for-create-or-update-security-solution/prod.logic.yaml8CBCFC3A68471C83C68DC0530E64A7DA
Open/types/CA10__CaAzureActivityLogAlert__c/object.extracts.yaml79B153D6511F943B6AB929697CE0452E
Open/ce/ca/azure/subscription/activity-log-alert-for-create-or-update-security-solution/test-data.jsonEDF1114DD867EC8C091330E33321749A

Generate FULL script​

java -jar repo-manager.jar policies generate FULL /ce/ca/azure/subscription/activity-log-alert-for-create-or-update-security-solution/prod.logic.yaml

Generate DEBUG script​

java -jar repo-manager.jar policies generate DEBUG /ce/ca/azure/subscription/activity-log-alert-for-create-or-update-security-solution/prod.logic.yaml

Generate CAPTURE_TEST_DATA script​

java -jar repo-manager.jar policies generate CAPTURE_TEST_DATA /ce/ca/azure/subscription/activity-log-alert-for-create-or-update-security-solution/prod.logic.yaml

Generate TESTS script​

java -jar repo-manager.jar policies generate TESTS /ce/ca/azure/subscription/activity-log-alert-for-create-or-update-security-solution/prod.logic.yaml

Execute tests​

java -jar repo-manager.jar policies test /ce/ca/azure/subscription/activity-log-alert-for-create-or-update-security-solution/prod.logic.yaml

Content​

Open File

---
inputType: "CA10__CaAzureAccount__c"
testData:
  - file: "test-data.json"
conditions:
  - status: "COMPLIANT"
    currentStateMessage: "This subscription has an Activity Log Alert for Create or Update Security Solution."
    check:
      RELATED_LIST_HAS:
        status: "COMPLIANT"
        relationshipName: "CA10__Azure_Activity_Log_Alerts__r"
otherwise:
  status: "INCOMPLIANT"
  currentStateMessage: "This subscription doesn't have an Activity Log Alert for Create or Update Security Solution."
  remediationMessage: "Consider creating an Activity Log Alert for Create or Update Security Solution."
relatedLists:
  - relationshipName: "CA10__Azure_Activity_Log_Alerts__r"
    importExtracts:
      - file: "/types/CA10__CaAzureActivityLogAlert__c/object.extracts.yaml"
    conditions:
      - status: "INAPPLICABLE"
        currentStateMessage: "This is a disabled Activity Log Alert."
        check:
          NOT_EQUAL:
            left:
              EXTRACT: "CA10__enabledStatus__c"
            right:
              TEXT: "Enabled"
      - status: "COMPLIANT"
        currentStateMessage: "This is an Activity Log Alert for Create or Update Security Solution."
        check:
          IS_EQUAL:
            left:
              JSON_QUERY_BOOLEAN:
                  arg: 
                    EXTRACT: "caJsonFrom__conditionJson__c"
                  expression: "contains(allOf[*].equals, 'Microsoft.Security/securitySolutions/write')"
                  undeterminedIf: 
                    evaluationError: "The JSON query has failed."
                    resultTypeMismatch: "The JSON query did not return boolean type."
            right:
              BOOLEAN: true
    otherwise:
      status: "INAPPLICABLE"
      currentStateMessage: "This is an unrelated Activity Log Alert."