rules/conditions/Azure/NSG/nsg-service-exposed-to-the-internet.json

{
    operator: 'and',
    filter: [
        {
            conditions : [
                ["properties.direction", "eq", "Inbound"],
                ["properties.access", "eq", "Allow"]
            ],
            operator : 'and'
        },
        {
            conditions : [
                [ "properties.SourceAddressPrefix", "eq", "*" ],
                [ "properties.SourceAddressPrefix", "eq", "Internet" ],
                [ "properties.SourceAddressPrefixes", "eq", "*" ],
                [ "properties.SourceAddressPrefixes", "eq", "Internet" ]
            ],
            operator : 'or'
        }
    ]
}