Find Azure application gateway listeners associated with public IP

[Juanpnav]

I think the only method is with this RQL:

config from cloud.resource where cloud.type = 'azure' AND api.name = 'azure-application-gateway' AND json.rule = "['properties.frontendIPConfigurations'][?(@.['properties.publicIPAddress'].id != '')].['properties.httpListeners'].id exists"

However, inside the array you can't put any key value with dots between its characters, so I got error by trying that query. What Can I do?

[smakineni]

Hello, this can done using RQL joins.

Please try the RQL query below.

config from cloud.resource where api.name = 'azure-application-gateway' as X; config from cloud.resource where api.name = 'azure-network-public-ip-address' as Y; filter "$.['X'].['properties.frontendIPConfigurations'][*].['properties.publicIPAddress'].['id'] contains $.Y.id"; show Y;

Ref: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/opera...

Please let me know if you have any questions or would like to schedule a call to discuss this further.

Regards