rules/conditions/azure/nsg/exposed-to-the-internet.json

{
    "operator": "and",
    "filter": [
        {
            "conditions": [
                ["direction", "eq", "Inbound"],
                ["Access", "eq", "Allow"]
            ],
            "operator": "and"
        },
        {
            "conditions":[
                [ "SourceAddressPrefix", "eq", "*" ],
                [ "SourceAddressPrefix", "eq", "Internet" ],
                [ "SourceAddressPrefixes", "eq", "*" ],
                [ "SourceAddressPrefixes", "eq", "Internet" ]
            ],
            "operator":"or"
        }
    ]
}