adding an else condition to relate management lock with resource group

tenable · Jan 9, 2021 · a05d83d · a05d83d
1 parent 5a19951
commit a05d83d
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/pkg/policies/opa/rego/azure/azurerm_resource_group/resourceGroupLock.rego b/pkg/policies/opa/rego/azure/azurerm_resource_group/resourceGroupLock.rego
@@ -24,4 +24,8 @@ resourceLockExist(resource_group) = exists {
     resource_group_name := sprintf("azurerm_resource_group.%s", [resource_group.name])
 	resource_lock_exist_set[resource_group_name]
     exists = true
+} else = exists {
+	resource_lock_exist_set := { resource_lock_id | resource_lock_id := split(input.azurerm_management_lock[i].config.scope, ".")[1] }
+	resource_lock_exist_set[resource_group.name]
+    exists = true
 }