rules/conditions/Azure/NSG/exposed-to-the-internet.json

{
    operator: 'and',
    filter: [
        {
            conditions : [
                ["direction", "eq", "Inbound"],
                ["Access", "eq", "Allow"]
            ],
            operator : 'and'
        },
        {
            conditions : [
                [ "SourceAddressPrefix", "eq", "*" ],
                [ "SourceAddressPrefix", "eq", "Internet" ],
                [ "SourceAddressPrefixes", "eq", "*" ],
                [ "SourceAddressPrefixes", "eq", "Internet" ]
            ],
            operator : 'or'
        }
    ]
}