🧠 Azure Network Security Group Flow Logs retention period is less than 90 days - prod.logic.yaml 🟢

• Contextual name: 🧠 prod.logic.yaml 🟢
• ID: /ce/ca/azure/virtual-network/security-group-flow-logs-retention-period-over-90-days/prod.logic.yaml
• Located in: 📝 Azure Network Security Group Flow Logs retention period is less than 90 days 🟢

Flags

• 🟢 Logic test success
• 🟢 Logic with extracts
• 🟢 Logic with test data

Input Type

	Type	API Name	Extracts	Extract Files	Logic Files
🔒	📕 Azure Network Security Group	CA10__CaAzureNetworkSecurityGroup__c	3	1	5

Uses

• 🔌 Azure Network Security Group - object.extracts.yaml
• 🧪 test-data.json

Test Results 🟢

Generated at: 2025-04-24T23:46:32.741504699Z Open

Result	Id	Condition Index	Condition Text	Runtime Error
🟢	test1	✔️ 99	✔️ isDisappeared(CA10__disappearanceTime__c)	✔️ null
🟢	test2	✔️ 199	✔️ extract('CA10__flowLogsEnabled__c') == false	✔️ null
🟢	test3	✔️ 299	✔️ extract('CA10__flowLogsRetentionPolicyEnabled__c') == false	✔️ null
🟢	test4	✔️ 399	✔️ extract('CA10__flowLogsRetentionPolicyDays__c') < number(90.0)	✔️ null
🟢	test5	✔️ 400	✔️ otherwise	✔️ null

Generation

	File	MD5
Open	/ce/ca/azure/virtual-network/security-group-flow-logs-retention-period-over-90-days/policy.yaml	EB86062686FA1EA3450B44CF9FB5EAA5
Open	/ce/ca/azure/virtual-network/security-group-flow-logs-retention-period-over-90-days/prod.logic.yaml	21A6DF7D91F4733A8F806D380D41E54E
Open	/ce/ca/azure/virtual-network/security-group-flow-logs-retention-period-over-90-days/test-data.json	9060F77EB5BC6C7FDBB8D9FA9BE9A3AE
Open	/types/CA10__CaAzureNetworkSecurityGroup__c/object.extracts.yaml	EF77C87EFC93F0E147E29C6B1255AD9E

Generate FULL script

java -jar repo-manager.jar policies generate FULL /ce/ca/azure/virtual-network/security-group-flow-logs-retention-period-over-90-days/prod.logic.yaml

Generate DEBUG script

java -jar repo-manager.jar policies generate DEBUG /ce/ca/azure/virtual-network/security-group-flow-logs-retention-period-over-90-days/prod.logic.yaml

Generate CAPTURE_TEST_DATA script

java -jar repo-manager.jar policies generate CAPTURE_TEST_DATA /ce/ca/azure/virtual-network/security-group-flow-logs-retention-period-over-90-days/prod.logic.yaml

Generate TESTS script

java -jar repo-manager.jar policies generate TESTS /ce/ca/azure/virtual-network/security-group-flow-logs-retention-period-over-90-days/prod.logic.yaml

Execute tests

java -jar repo-manager.jar policies test /ce/ca/azure/virtual-network/security-group-flow-logs-retention-period-over-90-days/prod.logic.yaml

Content

Open File

---
inputType: "CA10__CaAzureNetworkSecurityGroup__c"
importExtracts:
  - file: /types/CA10__CaAzureNetworkSecurityGroup__c/object.extracts.yaml
testData:
  - file: "test-data.json"
conditions:
  - status: "INCOMPLIANT"
    currentStateMessage: "Network Security Group Flow Logs are disabled."
    remediationMessage: "Consider enabling Network Security Group Flow Logs."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10__flowLogsEnabled__c"
        right:
          BOOLEAN: false
  - status: "INCOMPLIANT"
    currentStateMessage: "Network Security Group Flow Logs retention policy is disabled."
    remediationMessage: "Consider enabling retention policy for Network Security Group Flow Logs."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10__flowLogsRetentionPolicyEnabled__c"
        right:
          BOOLEAN: false
  - status: "INCOMPLIANT"
    currentStateMessage: "Network Security Group Flow Logs retention period is less than 90 days."
    remediationMessage: "Consider setting the retention period to 'greater then or equal to 90 days'."
    check:
      LESS_THAN:
        left:
          EXTRACT: "CA10__flowLogsRetentionPolicyDays__c"
        right:
          NUMBER: 90.0
otherwise:
  status: "COMPLIANT"
  currentStateMessage: "Network Security Group Flow Logs are enabled and the retention period is set to 'greater than or equal to 90 days'."