func()

in internal/scanners/evgd/rules.go [14:93]

• 80 lines of code
• 2 McCabe index (conditional complexity)

func (a *EventGridScanner) GetRecommendations() map[string]models.AzqrRecommendation {
	return map[string]models.AzqrRecommendation{
		"evgd-001": {
			RecommendationID: "evgd-001",
			ResourceType:     "Microsoft.EventGrid/domains",
			Category:         models.CategoryMonitoringAndAlerting,
			Recommendation:   "Event Grid Domain should have diagnostic settings enabled",
			Impact:           models.ImpactLow,
			Eval: func(target interface{}, scanContext *models.ScanContext) (bool, string) {
				service := target.(*armeventgrid.Domain)
				_, ok := scanContext.DiagnosticsSettings[strings.ToLower(*service.ID)]
				return !ok, ""
			},
			LearnMoreUrl: "https://learn.microsoft.com/en-us/azure/event-grid/diagnostic-logs",
		},
		"evgd-003": {
			RecommendationID:   "evgd-003",
			ResourceType:       "Microsoft.EventGrid/domains",
			Category:           models.CategoryHighAvailability,
			Recommendation:     "Event Grid Domain should have a SLA",
			RecommendationType: models.TypeSLA,
			Impact:             models.ImpactHigh,
			Eval: func(target interface{}, scanContext *models.ScanContext) (bool, string) {
				return false, "99.99%"
			},
			LearnMoreUrl: "https://www.azure.cn/en-us/support/sla/event-grid/",
		},
		"evgd-004": {
			RecommendationID: "evgd-004",
			ResourceType:     "Microsoft.EventGrid/domains",
			Category:         models.CategorySecurity,
			Recommendation:   "Event Grid Domain should have private endpoints enabled",
			Impact:           models.ImpactHigh,
			Eval: func(target interface{}, scanContext *models.ScanContext) (bool, string) {
				i := target.(*armeventgrid.Domain)
				pe := len(i.Properties.PrivateEndpointConnections) > 0
				return !pe, ""
			},
			LearnMoreUrl: "https://learn.microsoft.com/en-us/azure/event-grid/configure-private-endpoints",
		},
		"evgd-006": {
			RecommendationID: "evgd-006",
			ResourceType:     "Microsoft.EventGrid/domains",
			Category:         models.CategoryGovernance,
			Recommendation:   "Event Grid Domain Name should comply with naming conventions",
			Impact:           models.ImpactLow,
			Eval: func(target interface{}, scanContext *models.ScanContext) (bool, string) {
				c := target.(*armeventgrid.Domain)
				caf := strings.HasPrefix(*c.Name, "evgd")
				return !caf, ""
			},
			LearnMoreUrl: "https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/resource-abbreviations",
		},
		"evgd-007": {
			RecommendationID: "evgd-007",
			ResourceType:     "Microsoft.EventGrid/domains",
			Category:         models.CategoryGovernance,
			Recommendation:   "Event Grid Domain should have tags",
			Impact:           models.ImpactLow,
			Eval: func(target interface{}, scanContext *models.ScanContext) (bool, string) {
				c := target.(*armeventgrid.Domain)
				return len(c.Tags) == 0, ""
			},
			LearnMoreUrl: "https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/tag-resources?tabs=json",
		},
		"evgd-008": {
			RecommendationID: "evgd-008",
			ResourceType:     "Microsoft.EventGrid/domains",
			Category:         models.CategorySecurity,
			Recommendation:   "Event Grid Domain should have local authentication disabled",
			Impact:           models.ImpactMedium,
			Eval: func(target interface{}, scanContext *models.ScanContext) (bool, string) {
				c := target.(*armeventgrid.Domain)
				localAuth := c.Properties.DisableLocalAuth != nil && *c.Properties.DisableLocalAuth
				return !localAuth, ""
			},
			LearnMoreUrl: "https://learn.microsoft.com/en-us/azure/event-grid/authenticate-with-access-keys-shared-access-signatures",
		},
	}
}