🧠 Azure Managed Disk Public Network Access is not disabled - prod.logic.yaml 🟢

• Contextual name: 🧠 prod.logic.yaml 🟢
• ID: /ce/ca/azure/virtual-machine/disable-managed-disk-public-network-access/prod.logic.yaml
• Located in: 📝 Azure Managed Disk Public Network Access is not disabled 🟢

Flags

• 🟢 Logic test success
• 🟢 Logic with extracts
• 🟢 Logic with test data

Input Type

	Type	API Name	Extracts	Extract Files	Logic Files
🔒	📕 Azure Managed Disk	CA10__CaAzureManagedDisk__c	6	1	3

Uses

• 🔌 Azure Managed Disk - object.extracts.yaml
• 🧪 test-data.json

Test Results 🟢

Generated at: 2025-04-24T23:46:28.460406727Z Open

Result	Id	Condition Index	Condition Text	Runtime Error
🟢	test1	✔️ 99	✔️ isDisappeared(CA10__disappearanceTime__c)	✔️ null
🟢	test2	✔️ 199	✔️ extract('CA10__networkAccessPolicy__c') == 'AllowAll' && extract('CA10__publicNetworkAccess__c') == 'Enabled'	✔️ null
🟢	test3	✔️ 299	✔️ extract('CA10__publicNetworkAccess__c') != 'Disabled'	✔️ null
🟢	test4	✔️ 299	✔️ extract('CA10__publicNetworkAccess__c') != 'Disabled'	✔️ null
🟢	test5	✔️ 399	✔️ extract('CA10__networkAccessPolicy__c') == 'AllowAll'	✔️ null
🟢	test6	✔️ 499	✔️ (extract('CA10__networkAccessPolicy__c') == 'AllowPrivate' || extract('CA10__networkAccessPolicy__c') == 'DenyAll') && extract('CA10__publicNetworkAccess__c') == 'Disabled'	✔️ null
🟢	test7	✔️ 499	✔️ (extract('CA10__networkAccessPolicy__c') == 'AllowPrivate' || extract('CA10__networkAccessPolicy__c') == 'DenyAll') && extract('CA10__publicNetworkAccess__c') == 'Disabled'	✔️ null

Generation

	File	MD5
Open	/ce/ca/azure/virtual-machine/disable-managed-disk-public-network-access/policy.yaml	AFF0987D241199C8604463D76E1E6953
Open	/ce/ca/azure/virtual-machine/disable-managed-disk-public-network-access/prod.logic.yaml	DAD10E42E92037AF4E56EC7DD5426482
Open	/types/CA10__CaAzureManagedDisk__c/object.extracts.yaml	F0194C2E5818080A00E360A4D0FC7075
Open	/ce/ca/azure/virtual-machine/disable-managed-disk-public-network-access/test-data.json	09478C3E3C6F9ACDB8111725F8CF17B3

Generate FULL script

java -jar repo-manager.jar policies generate FULL /ce/ca/azure/virtual-machine/disable-managed-disk-public-network-access/prod.logic.yaml

Generate DEBUG script

java -jar repo-manager.jar policies generate DEBUG /ce/ca/azure/virtual-machine/disable-managed-disk-public-network-access/prod.logic.yaml

Generate CAPTURE_TEST_DATA script

java -jar repo-manager.jar policies generate CAPTURE_TEST_DATA /ce/ca/azure/virtual-machine/disable-managed-disk-public-network-access/prod.logic.yaml

Generate TESTS script

java -jar repo-manager.jar policies generate TESTS /ce/ca/azure/virtual-machine/disable-managed-disk-public-network-access/prod.logic.yaml

Execute tests

java -jar repo-manager.jar policies test /ce/ca/azure/virtual-machine/disable-managed-disk-public-network-access/prod.logic.yaml

Content

Open File

---
inputType: "CA10__CaAzureManagedDisk__c"
importExtracts:
  - file: "/types/CA10__CaAzureManagedDisk__c/object.extracts.yaml"
testData:
  - file: "test-data.json"
conditions:
  - status: "INCOMPLIANT"
    currentStateMessage: "The Managed Disk data is publicly accessible on the internet 
      and can be exported or uploaded to from any network."
    remediationMessage: "Consider restricting the Managed Disk Public Access."
    check:
      AND:
        args:
        - IS_EQUAL:
            left:
              EXTRACT: "CA10__networkAccessPolicy__c"
            right:
              TEXT: "AllowAll"
        - IS_EQUAL:
            left:
              EXTRACT: "CA10__publicNetworkAccess__c"
            right:
              TEXT: "Enabled"
  - status: "INCOMPLIANT"
    currentStateMessage: "The Managed Disk Public Access is not disabled."
    remediationMessage: "Consider disabling the Managed Disk Public Access."
    check:
      NOT_EQUAL:
        left:
          EXTRACT: "CA10__publicNetworkAccess__c"
        right:
          TEXT: "Disabled"
  - status: "INCOMPLIANT"
    currentStateMessage: "The Managed Disk Network Access Policy allows access from any network."
    remediationMessage: "Consider restricting the Managed Disk Network Access Policy."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10__networkAccessPolicy__c"
        right:
          TEXT: "AllowAll"
  - status: "COMPLIANT"
    currentStateMessage: "The Managed Disk Public Access is restricted."
    check:
      AND:
        args:
          - OR:
              args:
                - IS_EQUAL:
                    left:
                      EXTRACT: "CA10__networkAccessPolicy__c"
                    right:
                      TEXT: "AllowPrivate"
                - IS_EQUAL:
                    left:
                      EXTRACT: "CA10__networkAccessPolicy__c"
                    right:
                      TEXT: "DenyAll"
          - IS_EQUAL:
              left:
                EXTRACT: "CA10__publicNetworkAccess__c"
              right:
                TEXT: "Disabled"
otherwise:
  status: "UNDETERMINED"
  currentStateMessage: "Unexpected value in the fields."