Merge pull request #476 from harkirat22/harkirat22/432

adding an else condition to relate management lock with resource group
tenable · Jan 15, 2021 · c313c32 · c313c32
2 parents 7c974f6 + a05d83d
commit c313c32
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/pkg/policies/opa/rego/azure/azurerm_resource_group/resourceGroupLock.rego b/pkg/policies/opa/rego/azure/azurerm_resource_group/resourceGroupLock.rego
@@ -24,4 +24,8 @@ resourceLockExist(resource_group) = exists {
     resource_group_name := sprintf("azurerm_resource_group.%s", [resource_group.name])
 	resource_lock_exist_set[resource_group_name]
     exists = true
+} else = exists {
+	resource_lock_exist_set := { resource_lock_id | resource_lock_id := split(input.azurerm_management_lock[i].config.scope, ".")[1] }
+	resource_lock_exist_set[resource_group.name]
+    exists = true
 }