rules/conditions/azure/nsg/nsg-service-exposed-to-the-internet.json

{
  "operator": "and",
  "filter": [
    {
      "conditions": [
        [
          "properties.direction",
          "eq",
          "Inbound"
        ],
        [
          "properties.access",
          "eq",
          "Allow"
        ]
      ],
      "operator": "and"
    },
    {
      "conditions": [
        [
          "properties.SourceAddressPrefix",
          "eq",
          "*"
        ],
        [
          "properties.SourceAddressPrefix",
          "eq",
          "Internet"
        ],
        [
          "properties.SourceAddressPrefixes",
          "eq",
          "*"
        ],
        [
          "properties.SourceAddressPrefixes",
          "eq",
          "Internet"
        ]
      ],
      "operator": "or"
    }
  ]
}