From a33d4d43375ac2fce74ddc172fd6116e468594d3 Mon Sep 17 00:00:00 2001 From: petertrr Date: Tue, 19 Mar 2024 12:58:50 +0000 Subject: [PATCH] Create rule S6952 --- .../S6952/azureresourcemanager/metadata.json | 25 +++ rules/S6952/azureresourcemanager/rule.adoc | 146 ++++++++++++++++++ rules/S6952/metadata.json | 2 + 3 files changed, 173 insertions(+) create mode 100644 rules/S6952/azureresourcemanager/metadata.json create mode 100644 rules/S6952/azureresourcemanager/rule.adoc create mode 100644 rules/S6952/metadata.json diff --git a/rules/S6952/azureresourcemanager/metadata.json b/rules/S6952/azureresourcemanager/metadata.json new file mode 100644 index 00000000000..fdb6b685b1b --- /dev/null +++ b/rules/S6952/azureresourcemanager/metadata.json @@ -0,0 +1,25 @@ +{ + "title": "Don't use redundant dependencies between resources", + "type": "CODE_SMELL", + "status": "ready", + "remediation": { + "func": "Constant\/Issue", + "constantCost": "5min" + }, + "tags": [ + ], + "defaultSeverity": "Major", + "ruleSpecification": "RSPEC-6952", + "sqKey": "S6952", + "scope": "All", + "defaultQualityProfiles": ["Sonar way"], + "quickfix": "unknown", + "code": { + "impacts": { + "MAINTAINABILITY": "HIGH", + "RELIABILITY": "MEDIUM", + "SECURITY": "LOW" + }, + "attribute": "CONVENTIONAL" + } +} diff --git a/rules/S6952/azureresourcemanager/rule.adoc b/rules/S6952/azureresourcemanager/rule.adoc new file mode 100644 index 00000000000..4049583afa8 --- /dev/null +++ b/rules/S6952/azureresourcemanager/rule.adoc @@ -0,0 +1,146 @@ +In Azure Resource Manager (ARM) templates, dependencies between resources can be defined in two ways: implicitly or explicitly. To avoid redundancy and make the template easier to read, it is recommended not to add explicit dependencies when they are already defined implicitly. + +== Why is this an issue? +In Azure Resource Manager (ARM) templates, dependencies between resources can be defined in two ways: implicitly or explicitly. An implicit dependency is set when you use the reference function and pass in the resource name. An explicit dependency is defined when you add a `dependsOn` element. However, a code smell arises when these dependencies are used simultaneously for the same resources. This redundancy is unnecessary and can lead to confusion. Therefore, to maintain clarity and efficiency in your code, it is best to omit explicit dependencies when they are already defined implicitly. + +== How to fix it in ARM templates + +If a resource references another with a `reference` function, remove the `dependsOn` element if it points to the same resource. + +=== Code examples + +==== Noncompliant code example + +[source,json,diff-id=1,diff-type=noncompliant] +---- +{ + "apiVersion": "2019-04-01", + "type": "Microsoft.Network/networkInterfaces", + "name": "exampleNic", + "location": "[resourceGroup().location]", + "dependsOn": [ + "[resourceId('Microsoft.Network/virtualNetworks', 'exampleVNet')]" + ], + "properties": { + "ipConfigurations": [ + { + "name": "ipconfig1", + "properties": { + "subnet": { + "id": "[reference('Microsoft.Network/virtualNetworks/exampleVNet/subnets/exampleSubnet').id]" + } + } + } + ] + } +} +---- + +==== Compliant solution + +[source,json,diff-id=1,diff-type=compliant] +---- +{ + "apiVersion": "2019-04-01", + "type": "Microsoft.Network/networkInterfaces", + "name": "exampleNic", + "location": "[resourceGroup().location]", + "properties": { + "ipConfigurations": [ + { + "name": "ipconfig1", + "properties": { + "subnet": { + "id": "[reference('Microsoft.Network/virtualNetworks/exampleVNet/subnets/exampleSubnet').id]" + } + } + } + ] + } +} +---- + +== How to fix it in Bicep +If a resource references another resource by a symbolic name or with a `reference` function, remove the `dependsOn` element if it points to the same resource. Note: Bicep provides the reference function, but in most cases, the symbolic name should be preferred over it. + +=== Code examples + +==== Noncompliant code example + +[source,bicep,diff-id=2,diff-type=noncompliant] +---- +resource exampleVNet 'Microsoft.Network/virtualNetworks@2020-06-01' existing = { + name: 'exampleVNet' +} + +resource exampleSubnet 'Microsoft.Network/virtualNetworks/subnets@2020-06-01' existing = { + parent: exampleVNet + name: 'exampleSubnet' +} + +resource exampleNic 'Microsoft.Network/networkInterfaces@2020-06-01' = { + name: 'exampleNic' + location: resourceGroup().location + dependsOn: [ + exampleSubnet + ] + properties: { + ipConfigurations: [ + { + name: 'ipconfig1' + properties: { + subnet: { + id: exampleSubnet.id + } + } + } + ] + } +} +---- + +==== Compilant solution + +[source,bicep,diff-id=2,diff-type=noncompliant] +---- +resource exampleVNet 'Microsoft.Network/virtualNetworks@2020-06-01' existing = { + name: 'exampleVNet' +} + +resource exampleSubnet 'Microsoft.Network/virtualNetworks/subnets@2020-06-01' existing = { + parent: exampleVNet + name: 'exampleSubnet' +} + +resource exampleNic 'Microsoft.Network/networkInterfaces@2020-06-01' = { + name: 'exampleNic' + location: resourceGroup().location + properties: { + ipConfigurations: [ + { + name: 'ipconfig1' + properties: { + subnet: { + id: exampleSubnet.id + } + } + } + ] + } +} +---- + +== Resources +=== Documentation +* https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/best-practices#resource-dependencies/[Azure Resource Manager templates best practices] +* https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/resource-dependency#reference-and-list-functions[Azure Resource Manager - reference and list functions] + +ifdef::env-github,rspecator-view[] + +''' +== Implementation Specification +(visible only on this page) + +include::../message.adoc[] + +endif::env-github,rspecator-view[] diff --git a/rules/S6952/metadata.json b/rules/S6952/metadata.json new file mode 100644 index 00000000000..2c63c085104 --- /dev/null +++ b/rules/S6952/metadata.json @@ -0,0 +1,2 @@ +{ +}