add new ignore status

mblaschke · mblaschke · commit 08ca7d9c48d6 · 2023-10-09T22:14:54.000+02:00
Signed-off-by: Markus Blaschke &lt;mblaschke82@gmail.com&gt;
diff --git a/auditor/auditor.keyvaultaccesspolicies.go b/auditor/auditor.keyvaultaccesspolicies.go
@@ -24,7 +24,7 @@ func (auditor *AzureAuditor) auditKeyvaultAccessPolicies(ctx context.Context, lo
 		matchingRuleId, status := auditor.config.KeyvaultAccessPolicies.Validate(object)
 		report.Add(object, matchingRuleId, status)
 
-		if !status && auditor.config.KeyvaultAccessPolicies.IsMetricsEnabled() {
+		if status.IsDeny() && auditor.config.KeyvaultAccessPolicies.IsMetricsEnabled() {
 			violationMetric.AddInfo(
 				auditor.config.KeyvaultAccessPolicies.CreatePrometheusMetricFromAzureObject(object, matchingRuleId),
 			)
diff --git a/auditor/auditor.loganalytics.go b/auditor/auditor.loganalytics.go
@@ -40,7 +40,7 @@ func (auditor *AzureAuditor) auditLogAnalytics(ctx context.Context, logger *zap.
 		matchingRuleId, status := config.Validate(object)
 		report.Add(object, matchingRuleId, status)
 
-		if !status && config.IsMetricsEnabled() {
+		if status.IsDeny() && config.IsMetricsEnabled() {
 			violationMetric.AddInfo(
 				config.CreatePrometheusMetricFromAzureObject(object, matchingRuleId),
 			)
diff --git a/auditor/auditor.report.go b/auditor/auditor.report.go
@@ -9,6 +9,7 @@ import (
 
 	yaml "gopkg.in/yaml.v3"
 
+	"github.com/webdevops/azure-auditor/auditor/types"
 	"github.com/webdevops/azure-auditor/auditor/validator"
 )
 
@@ -25,15 +26,16 @@ type (
 	}
 
 	AzureAuditorReportSummary struct {
-		Ok     int64
-		Failed int64
+		Ignore int64
+		Deny   int64
+		Allow  int64
 	}
 
 	AzureAuditorReportLine struct {
 		Resource map[string]interface{} `json:"resource"`
 		RuleID   string                 `json:"rule"`
 		GroupBy  interface{}            `json:"groupBy"`
-		Status   bool                   `json:"status"`
+		Status   string                 `json:"status"`
 		Count    uint64                 `json:"count"`
 	}
 )
@@ -73,7 +75,7 @@ func (report *AzureAuditorReport) Clear() {
 	report.Lines = []*AzureAuditorReportLine{}
 }
 
-func (report *AzureAuditorReport) Add(resource *validator.AzureObject, ruleID string, status bool) {
+func (report *AzureAuditorReport) Add(resource *validator.AzureObject, ruleID string, status types.RuleStatus) {
 	report.lock.Lock()
 	defer report.lock.Unlock()
 
@@ -82,13 +84,16 @@ func (report *AzureAuditorReport) Add(resource *validator.AzureObject, ruleID st
 		&AzureAuditorReportLine{
 			Resource: *resource,
 			RuleID:   ruleID,
-			Status:   status,
+			Status:   status.String(),
 		},
 	)
 
-	if status {
-		report.Summary.Ok++
-	} else {
-		report.Summary.Failed++
+	switch status {
+	case types.RuleStatusIgnore:
+		report.Summary.Ignore++
+	case types.RuleStatusDeny:
+		report.Summary.Deny++
+	case types.RuleStatusAllow:
+		report.Summary.Allow++
 	}
 }
diff --git a/auditor/auditor.resourcegraph.go b/auditor/auditor.resourcegraph.go
@@ -24,7 +24,7 @@ func (auditor *AzureAuditor) auditResourceGraph(ctx context.Context, logger *zap
 		matchingRuleId, status := config.Validate(object)
 		report.Add(object, matchingRuleId, status)
 
-		if !status && config.IsMetricsEnabled() {
+		if status.IsDeny() && config.IsMetricsEnabled() {
 			violationMetric.AddInfo(
 				config.CreatePrometheusMetricFromAzureObject(object, matchingRuleId),
 			)
diff --git a/auditor/auditor.resourcegroups.go b/auditor/auditor.resourcegroups.go
@@ -21,7 +21,7 @@ func (auditor *AzureAuditor) auditResourceGroups(ctx context.Context, logger *za
 		matchingRuleId, status := auditor.config.ResourceGroups.Validate(object)
 		report.Add(object, matchingRuleId, status)
 
-		if !status && auditor.config.ResourceGroups.IsMetricsEnabled() {
+		if status.IsDeny() && auditor.config.ResourceGroups.IsMetricsEnabled() {
 			violationMetric.AddInfo(
 				auditor.config.ResourceGroups.CreatePrometheusMetricFromAzureObject(object, matchingRuleId),
 			)
diff --git a/auditor/auditor.resourceproviderfeatures.go b/auditor/auditor.resourceproviderfeatures.go
@@ -22,7 +22,7 @@ func (auditor *AzureAuditor) auditResourceProviderFeatures(ctx context.Context,
 		matchingRuleId, status := auditor.config.ResourceProviderFeatures.Validate(object)
 		report.Add(object, matchingRuleId, status)
 
-		if !status && auditor.config.ResourceProviderFeatures.IsMetricsEnabled() {
+		if status.IsDeny() && auditor.config.ResourceProviderFeatures.IsMetricsEnabled() {
 			violationMetric.AddInfo(
 				auditor.config.ResourceProviderFeatures.CreatePrometheusMetricFromAzureObject(object, matchingRuleId),
 			)
diff --git a/auditor/auditor.resourceproviders.go b/auditor/auditor.resourceproviders.go
@@ -23,7 +23,7 @@ func (auditor *AzureAuditor) auditResourceProviders(ctx context.Context, logger
 		matchingRuleId, status := auditor.config.ResourceProviders.Validate(object)
 		report.Add(object, matchingRuleId, status)
 
-		if !status && auditor.config.ResourceProviders.IsMetricsEnabled() {
+		if status.IsDeny() && auditor.config.ResourceProviders.IsMetricsEnabled() {
 			violationMetric.AddInfo(
 				auditor.config.ResourceProviders.CreatePrometheusMetricFromAzureObject(object, matchingRuleId),
 			)
diff --git a/auditor/auditor.roleassignments.go b/auditor/auditor.roleassignments.go
@@ -25,7 +25,7 @@ func (auditor *AzureAuditor) auditRoleAssignments(ctx context.Context, logger *z
 		matchingRuleId, status := auditor.config.RoleAssignments.Validate(object)
 		report.Add(object, matchingRuleId, status)
 
-		if !status && auditor.config.RoleAssignments.IsMetricsEnabled() {
+		if status.IsDeny() && auditor.config.RoleAssignments.IsMetricsEnabled() {
 			violationMetric.AddInfo(
 				auditor.config.RoleAssignments.CreatePrometheusMetricFromAzureObject(object, matchingRuleId),
 			)
diff --git a/auditor/types/const.go b/auditor/types/const.go
@@ -0,0 +1,51 @@
+package types
+
+import (
+	"strings"
+)
+
+type RuleStatus int
+
+var (
+	RuleStatusIgnore RuleStatus = -1
+	RuleStatusDeny   RuleStatus = 0
+	RuleStatusAllow  RuleStatus = 1
+)
+
+func StringToRuleStatus(val string) RuleStatus {
+	val = strings.TrimSpace(val)
+	val = strings.ToLower(val)
+
+	switch strings.ToLower(val) {
+	case "-1", "ignore":
+		return RuleStatusIgnore
+	case "0", "false", "deny":
+		return RuleStatusDeny
+	case "1", "true", "allow":
+		return RuleStatusAllow
+	}
+	return RuleStatusDeny
+}
+
+func (s RuleStatus) String() (ret string) {
+	ret = "unknown"
+	switch s {
+	case RuleStatusIgnore:
+		ret = "ignore"
+	case RuleStatusDeny:
+		ret = "deny"
+	case RuleStatusAllow:
+		ret = "allow"
+	}
+	return
+}
+
+func (s RuleStatus) IsIgnore() bool {
+	return s == RuleStatusIgnore
+}
+func (s RuleStatus) IsDeny() bool {
+	return s == RuleStatusDeny
+}
+func (s RuleStatus) IsAllow() bool {
+	return s == RuleStatusAllow
+}
diff --git a/auditor/validator/validation.go b/auditor/validator/validation.go
@@ -4,6 +4,8 @@ import (
 	"strings"
 
 	"github.com/prometheus/client_golang/prometheus"
+
+	"github.com/webdevops/azure-auditor/auditor/types"
 )
 
 type (
@@ -97,7 +99,7 @@ func (validation *AuditConfigValidation) CreatePrometheusMetricFromAzureObject(o
 	return labels
 }
 
-func (validation *AuditConfigValidation) Validate(object *AzureObject) (string, bool) {
+func (validation *AuditConfigValidation) Validate(object *AzureObject) (string, types.RuleStatus) {
 	resourceID := object.ResourceID()
 
 	if validation.Rules != nil {
@@ -108,7 +110,7 @@ func (validation *AuditConfigValidation) Validate(object *AzureObject) (string,
 					continue
 				} else {
 					// valid is not valid, returning here
-					return rule.Rule, rule.handleRuleStatus(object, false)
+					return rule.Rule, rule.handleRuleStatus(object, types.RuleStatusDeny)
 				}
 			}
 
@@ -127,7 +129,7 @@ func (validation *AuditConfigValidation) Validate(object *AzureObject) (string,
 						continue
 					} else {
 						// valid is not valid, returning here
-						return rule.Rule, rule.handleRuleStatus(object, false)
+						return rule.Rule, rule.handleRuleStatus(object, types.RuleStatusDeny)
 					}
 				}
 
@@ -138,5 +140,5 @@ func (validation *AuditConfigValidation) Validate(object *AzureObject) (string,
 		}
 	}
 
-	return "__DEFAULTDENY__", false
+	return "__DEFAULTDENY__", types.RuleStatusDeny
 }
diff --git a/auditor/validator/validation.rule.go b/auditor/validator/validation.rule.go
@@ -14,6 +14,8 @@ import (
 	"github.com/robertkrimen/otto"
 	_ "github.com/robertkrimen/otto/underscore"
 	"go.uber.org/zap"
+
+	"github.com/webdevops/azure-auditor/auditor/types"
 )
 
 type (
@@ -179,13 +181,13 @@ func (matcher *AuditConfigValidationRule) UnmarshalYAML(unmarshal func(interface
 	return nil
 }
 
-func (rule *AuditConfigValidationRule) handleRuleStatus(object *AzureObject, status bool) bool {
+func (rule *AuditConfigValidationRule) handleRuleStatus(object *AzureObject, status types.RuleStatus) types.RuleStatus {
 	atomic.AddInt64(&rule.Stats.Matches, 1)
 	if Logger != nil {
 		Logger.With(
 			zap.String("resourceID", object.ResourceID()),
 			zap.String("rule", rule.Rule),
-			zap.Bool("validationStatus", status),
+			zap.String("validationStatus", status.String()),
 		).Debugf("validation status: \"%v\"", status)
 	}
 	return status
@@ -195,16 +197,18 @@ func (matcher *AuditConfigValidationRule) IsActionContinue() bool {
 	return matcher.Action == "continue"
 }
 
-func (matcher *AuditConfigValidationRule) ValidationStatus() *bool {
+func (matcher *AuditConfigValidationRule) ValidationStatus() (ret *types.RuleStatus) {
 	switch strings.ToLower(matcher.Action) {
+	case "ignore":
+		ret = &types.RuleStatusIgnore
 	case "deny":
-		return to.BoolPtr(false)
+		ret = &types.RuleStatusDeny
 	case "allow":
-		return to.BoolPtr(true)
+		ret = &types.RuleStatusAllow
 	case "continue":
-		return nil
+		ret = nil
 	}
-	return nil
+	return
 }
 
 func (matcher *AuditConfigValidationRule) IsMatching(object *AzureObject) bool {
diff --git a/auditor/validator/validator_test.go b/auditor/validator/validator_test.go
@@ -26,6 +26,10 @@ test:
         regexp: "^barfoo"
       action: continue
 
+    - rule: ignoretest
+      resourcegroup.name: barfoo
+      action: ignore
+
     - rule: name
       resourcegroup.name: foobar
       action: allow
@@ -44,7 +48,7 @@ test:
 			"resourcegroup.tag.foobar": "barfoo",
 		},
 	)
-	if _, status := config.Test.Validate(obj); !status {
+	if _, status := config.Test.Validate(obj); !status.IsAllow() {
 		t.Errorf("expected matching object, got: %v", status)
 	}
 
@@ -54,7 +58,17 @@ test:
 			"resourcegroup.tag.barfoo": "foobar",
 		},
 	)
-	if _, status := config.Test.Validate(obj); status {
+	if _, status := config.Test.Validate(obj); !status.IsDeny() {
+		t.Errorf("expected NOT matching object, got: %v", status)
+	}
+
+	obj = NewAzureObject(
+		map[string]interface{}{
+			"resourcegroup.name":       "barfoo",
+			"resourcegroup.tag.foobar": "barfoo",
+		},
+	)
+	if _, status := config.Test.Validate(obj); !status.IsIgnore() {
 		t.Errorf("expected NOT matching object, got: %v", status)
 	}
 }
@@ -122,7 +136,7 @@ test:
 			"principal.type":           "group",
 		},
 	)
-	if ruleId, status := config.Test.Validate(obj); !status {
+	if ruleId, status := config.Test.Validate(obj); !status.IsAllow() {
 		t.Errorf("expected matching object, got: %v by rule %v", status, ruleId)
 	}
 
@@ -134,7 +148,7 @@ test:
 			"principal.type":           "group",
 		},
 	)
-	if ruleId, status := config.Test.Validate(obj); status {
+	if ruleId, status := config.Test.Validate(obj); !status.IsDeny() {
 		t.Errorf("expected NOT matching object, got: %v by rule %v", status, ruleId)
 	}
 
@@ -173,7 +187,7 @@ test:
 			"principal.type":           "group",
 		},
 	)
-	if ruleId, status := config.Test.Validate(obj); !status {
+	if ruleId, status := config.Test.Validate(obj); !status.IsAllow() {
 		t.Errorf("expected matching object, got: %v by rule %v", status, ruleId)
 	}
 
@@ -185,7 +199,7 @@ test:
 			"principal.type":           "group",
 		},
 	)
-	if ruleId, status := config.Test.Validate(obj); status || ruleId != "deny" {
+	if ruleId, status := config.Test.Validate(obj); !status.IsDeny() || ruleId != "deny" {
 		t.Errorf("expected NOT matching object with rule deny, got: %v by rule %v", status, ruleId)
 	}
 
@@ -215,7 +229,7 @@ test:
 			"resourcegroup.tag.updated": time.Now().Format("YYYY-MM-DD"),
 		},
 	)
-	if ruleId, status := config.Test.Validate(obj); !status {
+	if ruleId, status := config.Test.Validate(obj); !status.IsAllow() {
 		t.Errorf("expected matching object, got: %v by rule %v", status, ruleId)
 	}
 
@@ -224,7 +238,7 @@ test:
 			"resourcegroup.tag.updated": "2000-01-01",
 		},
 	)
-	if ruleId, status := config.Test.Validate(obj); status || ruleId != "deny" {
+	if ruleId, status := config.Test.Validate(obj); !status.IsDeny() || ruleId != "deny" {
 		t.Errorf("expected NOT matching object with rule deny, got: %v by rule %v", status, ruleId)
 	}
 
diff --git a/example.yaml b/example.yaml
@@ -80,6 +80,10 @@ resourceGroups:
       resourcegroup.location: { regexp: "westeurope" }
       action: continue
 
+    - rule: ignoretest
+      resourcegroup.name: barfoo
+      action: ignore
+
     - rule: no-tag-owner-devteam0
       resourcegroup.tag.owner:
           mode: optional
diff --git a/main.go b/main.go
diff --git a/templates/report.html b/templates/report.html
diff --git a/templates/report.js b/templates/report.js

Original file line number	Diff line number	Diff line change
`@@ -24,7 +24,7 @@ func (auditor *AzureAuditor) auditKeyvaultAccessPolicies(ctx context.Context, lo`
`24`	`24`	`matchingRuleId, status := auditor.config.KeyvaultAccessPolicies.Validate(object)`
`25`	`25`	`report.Add(object, matchingRuleId, status)`
`26`	`26`
`27`		`- if !status && auditor.config.KeyvaultAccessPolicies.IsMetricsEnabled() {`
	`27`	`+ if status.IsDeny() && auditor.config.KeyvaultAccessPolicies.IsMetricsEnabled() {`
`28`	`28`	`violationMetric.AddInfo(`
`29`	`29`	`auditor.config.KeyvaultAccessPolicies.CreatePrometheusMetricFromAzureObject(object, matchingRuleId),`
`30`	`30`	`)`
Original file line number	Diff line number	Diff line change
`@@ -40,7 +40,7 @@ func (auditor AzureAuditor) auditLogAnalytics(ctx context.Context, logger zap.`
`40`	`40`	`matchingRuleId, status := config.Validate(object)`
`41`	`41`	`report.Add(object, matchingRuleId, status)`
`42`	`42`
`43`		`- if !status && config.IsMetricsEnabled() {`
	`43`	`+ if status.IsDeny() && config.IsMetricsEnabled() {`
`44`	`44`	`violationMetric.AddInfo(`
`45`	`45`	`config.CreatePrometheusMetricFromAzureObject(object, matchingRuleId),`
`46`	`46`	`)`
Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,7 @@ import (`
`9`	`9`
`10`	`10`	`yaml "gopkg.in/yaml.v3"`
`11`	`11`
	`12`	`+ "github.com/webdevops/azure-auditor/auditor/types"`
`12`	`13`	`"github.com/webdevops/azure-auditor/auditor/validator"`
`13`	`14`	`)`
`14`	`15`
`@@ -25,15 +26,16 @@ type (`
`25`	`26`	`}`
`26`	`27`
`27`	`28`	`AzureAuditorReportSummary struct {`
`28`		`- Ok int64`
`29`		`- Failed int64`
	`29`	`+ Ignore int64`
	`30`	`+ Deny int64`
	`31`	`+ Allow int64`
`30`	`32`	`}`
`31`	`33`
`32`	`34`	`AzureAuditorReportLine struct {`
`33`	`35`	Resource map[string]interface{} `json:"resource"`
`34`	`36`	RuleID string `json:"rule"`
`35`	`37`	GroupBy interface{} `json:"groupBy"`
`36`		- Status bool `json:"status"`
	`38`	+ Status string `json:"status"`
`37`	`39`	Count uint64 `json:"count"`
`38`	`40`	`}`
`39`	`41`	`)`
`@@ -73,7 +75,7 @@ func (report *AzureAuditorReport) Clear() {`
`73`	`75`	`report.Lines = []*AzureAuditorReportLine{}`
`74`	`76`	`}`
`75`	`77`
`76`		`-func (report AzureAuditorReport) Add(resource validator.AzureObject, ruleID string, status bool) {`
	`78`	`+func (report AzureAuditorReport) Add(resource validator.AzureObject, ruleID string, status types.RuleStatus) {`
`77`	`79`	`report.lock.Lock()`
`78`	`80`	`defer report.lock.Unlock()`
`79`	`81`
`@@ -82,13 +84,16 @@ func (report AzureAuditorReport) Add(resource validator.AzureObject, ruleID st`
`82`	`84`	`&AzureAuditorReportLine{`
`83`	`85`	`Resource: *resource,`
`84`	`86`	`RuleID: ruleID,`
`85`		`- Status: status,`
	`87`	`+ Status: status.String(),`
`86`	`88`	`},`
`87`	`89`	`)`
`88`	`90`
`89`		`- if status {`
`90`		`- report.Summary.Ok++`
`91`		`- } else {`
`92`		`- report.Summary.Failed++`
	`91`	`+ switch status {`
	`92`	`+ case types.RuleStatusIgnore:`
	`93`	`+ report.Summary.Ignore++`
	`94`	`+ case types.RuleStatusDeny:`
	`95`	`+ report.Summary.Deny++`
	`96`	`+ case types.RuleStatusAllow:`
	`97`	`+ report.Summary.Allow++`
`93`	`98`	`}`
`94`	`99`	`}`
Original file line number	Diff line number	Diff line change
`@@ -21,7 +21,7 @@ func (auditor AzureAuditor) auditResourceGroups(ctx context.Context, logger za`
`21`	`21`	`matchingRuleId, status := auditor.config.ResourceGroups.Validate(object)`
`22`	`22`	`report.Add(object, matchingRuleId, status)`
`23`	`23`
`24`		`- if !status && auditor.config.ResourceGroups.IsMetricsEnabled() {`
	`24`	`+ if status.IsDeny() && auditor.config.ResourceGroups.IsMetricsEnabled() {`
`25`	`25`	`violationMetric.AddInfo(`
`26`	`26`	`auditor.config.ResourceGroups.CreatePrometheusMetricFromAzureObject(object, matchingRuleId),`
`27`	`27`	`)`
Original file line number	Diff line number	Diff line change
`@@ -22,7 +22,7 @@ func (auditor *AzureAuditor) auditResourceProviderFeatures(ctx context.Context,`
`22`	`22`	`matchingRuleId, status := auditor.config.ResourceProviderFeatures.Validate(object)`
`23`	`23`	`report.Add(object, matchingRuleId, status)`
`24`	`24`
`25`		`- if !status && auditor.config.ResourceProviderFeatures.IsMetricsEnabled() {`
	`25`	`+ if status.IsDeny() && auditor.config.ResourceProviderFeatures.IsMetricsEnabled() {`
`26`	`26`	`violationMetric.AddInfo(`
`27`	`27`	`auditor.config.ResourceProviderFeatures.CreatePrometheusMetricFromAzureObject(object, matchingRuleId),`
`28`	`28`	`)`
Original file line number	Diff line number	Diff line change
`@@ -23,7 +23,7 @@ func (auditor *AzureAuditor) auditResourceProviders(ctx context.Context, logger`
`23`	`23`	`matchingRuleId, status := auditor.config.ResourceProviders.Validate(object)`
`24`	`24`	`report.Add(object, matchingRuleId, status)`
`25`	`25`
`26`		`- if !status && auditor.config.ResourceProviders.IsMetricsEnabled() {`
	`26`	`+ if status.IsDeny() && auditor.config.ResourceProviders.IsMetricsEnabled() {`
`27`	`27`	`violationMetric.AddInfo(`
`28`	`28`	`auditor.config.ResourceProviders.CreatePrometheusMetricFromAzureObject(object, matchingRuleId),`
`29`	`29`	`)`
Original file line number	Diff line number	Diff line change
`@@ -25,7 +25,7 @@ func (auditor AzureAuditor) auditRoleAssignments(ctx context.Context, logger z`
`25`	`25`	`matchingRuleId, status := auditor.config.RoleAssignments.Validate(object)`
`26`	`26`	`report.Add(object, matchingRuleId, status)`
`27`	`27`
`28`		`- if !status && auditor.config.RoleAssignments.IsMetricsEnabled() {`
	`28`	`+ if status.IsDeny() && auditor.config.RoleAssignments.IsMetricsEnabled() {`
`29`	`29`	`violationMetric.AddInfo(`
`30`	`30`	`auditor.config.RoleAssignments.CreatePrometheusMetricFromAzureObject(object, matchingRuleId),`
`31`	`31`	`)`
Original file line number	Diff line number	Diff line change
`@@ -4,6 +4,8 @@ import (`
`4`	`4`	`"strings"`
`5`	`5`
`6`	`6`	`"github.com/prometheus/client_golang/prometheus"`
	`7`	`+`
	`8`	`+ "github.com/webdevops/azure-auditor/auditor/types"`
`7`	`9`	`)`
`8`	`10`
`9`	`11`	`type (`
`@@ -97,7 +99,7 @@ func (validation *AuditConfigValidation) CreatePrometheusMetricFromAzureObject(o`
`97`	`99`	`return labels`
`98`	`100`	`}`
`99`	`101`
`100`		`-func (validation AuditConfigValidation) Validate(object AzureObject) (string, bool) {`
	`102`	`+func (validation AuditConfigValidation) Validate(object AzureObject) (string, types.RuleStatus) {`
`101`	`103`	`resourceID := object.ResourceID()`
`102`	`104`
`103`	`105`	`if validation.Rules != nil {`
`@@ -108,7 +110,7 @@ func (validation AuditConfigValidation) Validate(object AzureObject) (string,`
`108`	`110`	`continue`
`109`	`111`	`} else {`
`110`	`112`	`// valid is not valid, returning here`
`111`		`- return rule.Rule, rule.handleRuleStatus(object, false)`
	`113`	`+ return rule.Rule, rule.handleRuleStatus(object, types.RuleStatusDeny)`
`112`	`114`	`}`
`113`	`115`	`}`
`114`	`116`
`@@ -127,7 +129,7 @@ func (validation AuditConfigValidation) Validate(object AzureObject) (string,`
`127`	`129`	`continue`
`128`	`130`	`} else {`
`129`	`131`	`// valid is not valid, returning here`
`130`		`- return rule.Rule, rule.handleRuleStatus(object, false)`
	`132`	`+ return rule.Rule, rule.handleRuleStatus(object, types.RuleStatusDeny)`
`131`	`133`	`}`
`132`	`134`	`}`
`133`	`135`
`@@ -138,5 +140,5 @@ func (validation AuditConfigValidation) Validate(object AzureObject) (string,`
`138`	`140`	`}`
`139`	`141`	`}`
`140`	`142`
`141`		`- return "__DEFAULTDENY__", false`
	`143`	`+ return "__DEFAULTDENY__", types.RuleStatusDeny`
`142`	`144`	`}`