rules/conditions/azure/nsg/exposed-to-the-internet.json

{
  "operator": "and",
  "filter": [
    {
      "conditions": [
        [
          "direction",
          "eq",
          "Inbound"
        ],
        [
          "Access",
          "eq",
          "Allow"
        ]
      ],
      "operator": "and"
    },
    {
      "conditions": [
        [
          "SourceAddressPrefix",
          "eq",
          "*"
        ],
        [
          "SourceAddressPrefix",
          "eq",
          "Internet"
        ],
        [
          "SourceAddressPrefixes",
          "eq",
          "*"
        ],
        [
          "SourceAddressPrefixes",
          "eq",
          "Internet"
        ]
      ],
      "operator": "or"
    }
  ]
}