diff --git a/pkg/policies/opa/rego/azure/azurerm_storage_container/checkStorageContainerAccess.rego b/pkg/policies/opa/rego/azure/azurerm_storage_container/checkStorageContainerAccess.rego index 0331f15dd..84bdb2ec5 100755 --- a/pkg/policies/opa/rego/azure/azurerm_storage_container/checkStorageContainerAccess.rego +++ b/pkg/policies/opa/rego/azure/azurerm_storage_container/checkStorageContainerAccess.rego @@ -2,5 +2,13 @@ package accurics {{.prefix}}checkStorageContainerAccess[storage_container.id] { storage_container := input.azurerm_storage_container[_] - storage_container.config.container_access_type != "private" + not checkAccessType(storage_container.config.container_access_type) } + +checkAccessType(accesstype) { + contains(accesstype, "private") +} + +checkAccessType(accesstype) { + contains(accesstype, "PRIVATE") +} \ No newline at end of file