Fix accurics.azure.AKS.3 (#712)

tenable · May 17, 2021 · 72e3ebc · 72e3ebc
1 parent 0e4c830
commit 72e3ebc
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/pkg/policies/opa/rego/azure/azurerm_container_registry/containerRegistryResourceLock.rego b/pkg/policies/opa/rego/azure/azurerm_container_registry/containerRegistryResourceLock.rego
@@ -16,10 +16,12 @@ package accurics
 }
 
 resourceLockExist(registry, registry_input) = exists {
+  # plan file inspection
 	resource_lock_exist_set := { resource_lock_id | input.azurerm_management_lock[i].type == "azurerm_management_lock"; resource_lock_id := input.azurerm_management_lock[i].config.scope }
-	resource_lock_exist_set[registry.id]
+	resource_lock_exist_set[registry.config.id]
     exists = true
 } else = exists {
+  # hcl inspection
 	resource_lock_exist_set := { resource_id | input.azurerm_management_lock[i].type == "azurerm_management_lock"; resource_id := input.azurerm_management_lock[i].config.name }
     registry_name := sprintf("azurerm_container_registry.%s", [registry.name])
 	resource_lock_exist_set[registry_name]