title | platform |
---|---|
About the azurerm_network_security_groups Resource |
azure |
WARNING This resource will be deprecated in InSpec Azure Resource Pack version 2. Please start using fully backward compatible
azure_network_security_groups
InSpec audit resource.
Use the azurerm_network_security_groups
InSpec audit resource to enumerate Network
Security Groups.
This resource interacts with version 2018-02-01
of the Azure Management API.
For more information see the official Azure documentation.
At the moment, there doesn't appear to be a way to select the version of the Azure API docs. If you notice a newer version being referenced in the official documentation please open an issue or submit a pull request using the updated version.
This resource is available in the inspec-azure
resource
pack. To use it, add the
following to your inspec.yml
in your top-level profile:
depends:
- name: inspec-azure
git: https://github.com/inspec/inspec-azure.git
You'll also need to setup your Azure credentials; see the resource pack README.
An azurerm_network_security_groups
resource block identifies Network Security Groups by
Resource Group.
describe azurerm_network_security_groups(resource_group: 'ExampleGroup') do
...
end
describe azurerm_network_security_groups(resource_group: 'ExampleGroup') do
its('names') { should include('ExampleNetworkSecurityGroup') }
end
names
The name of the Network Security Group
its('names') { should include('ExampleNetworkSecurityGroup') }
This InSpec audit resource has the following special matchers. For a full list of available matchers, please visit our Universal Matchers page.
The control will pass if the resource returns a result. Use should_not
if you expect
zero matches.
# If we expect 'ExampleGroup' Resource Group to have Network Security Groups
describe azurerm_network_security_groups(resource_group: 'ExampleGroup') do
it { should exist }
end
# If we expect 'EmptyExampleGroup' Resource Group to not have Network Security Groups
describe azurerm_network_security_groups(resource_group: 'EmptyExampleGroup') do
it { should_not exist }
end
Your Service
Principal
must be setup with a contributor
role on the subscription you wish to test.