regorus 0.9.1

A fast, lightweight Rego (OPA policy language) interpreter
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125

{
  "name": "target.tests.azure_policy",
  "description": "Azure Policy target for comprehensive policy evaluation testing",
  "version": "1.0.0",
  "resource_schema_selector": "type",
  "resource_schemas": [
    {
      "type": "object",
      "properties": {
        "type": { "const": "Microsoft.Resources/subscriptions" },
        "subscriptionId": { "type": "string" },
        "tenantId": { "type": "string" },
        "displayName": { "type": "string" }
      },
      "required": ["type", "subscriptionId"]
    },
    {
      "type": "object", 
      "properties": {
        "type": { "const": "Microsoft.Storage/storageAccounts" },
        "name": { "type": "string" },
        "location": { "type": "string" },
        "kind": { "enum": ["Storage", "StorageV2", "BlobStorage", "FileStorage", "BlockBlobStorage"] },
        "properties": {
          "type": "object",
          "properties": {
            "supportsHttpsTrafficOnly": { "type": "boolean" },
            "minimumTlsVersion": { "enum": ["TLS1_0", "TLS1_1", "TLS1_2"] },
            "allowBlobPublicAccess": { "type": "boolean" },
            "encryption": {
              "type": "object",
              "properties": {
                "services": {
                  "type": "object",
                  "properties": {
                    "blob": { "type": "object", "properties": { "enabled": { "type": "boolean" } } },
                    "file": { "type": "object", "properties": { "enabled": { "type": "boolean" } } }
                  }
                }
              }
            }
          }
        },
        "tags": { "type": "object" }
      },
      "required": ["type", "name", "location"]
    },
    {
      "type": "object",
      "properties": {
        "type": { "const": "Microsoft.Network/networkSecurityGroups" },
        "name": { "type": "string" },
        "location": { "type": "string" },
        "properties": {
          "type": "object",
          "properties": {
            "securityRules": {
              "type": "array",
              "items": {
                "type": "object",
                "properties": {
                  "name": { "type": "string" },
                  "properties": {
                    "type": "object",
                    "properties": {
                      "direction": { "enum": ["Inbound", "Outbound"] },
                      "access": { "enum": ["Allow", "Deny"] },
                      "protocol": { "enum": ["Tcp", "Udp", "*"] },
                      "sourcePortRange": { "type": "string" },
                      "destinationPortRange": { "type": "string" },
                      "sourceAddressPrefix": { "type": "string" },
                      "destinationAddressPrefix": { "type": "string" },
                      "priority": { "type": "integer", "minimum": 100, "maximum": 4096 }
                    }
                  }
                }
              }
            }
          }
        }
      },
      "required": ["type", "name", "location"]
    }
  ],
  "effects": {
    "allow": { "type": "boolean" },
    "deny": {
      "type": "object",
      "properties": {
        "message": { "type": "string" }
      }
    },
    "audit": {
      "type": "object",
      "properties": {
        "level": { "enum": ["info", "warning", "error"] },
        "message": { "type": "string" },
        "complianceState": { "enum": ["Compliant", "NonCompliant", "Unknown"] }
      }
    },
    "modify": {
      "type": "object",
      "properties": {
        "operations": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "operation": { "enum": ["add", "replace", "remove"] },
              "field": { "type": "string" },
              "value": { "type": "any" }
            }
          }
        }
      }
    },
    "deployIfNotExists": {
      "type": "object",
      "properties": {
        "template": { "type": "object" },
        "parameters": { "type": "object" }
      }
    }
  }
}