feat(terraform): check cognitive services restrict outbound network

[tjwald]

User description

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Description

Implemented a check for open ai cognitive services in azure to make sure outbound network is restricted.
Implements Prisma Policy Id :"4c4ae367-8609-4b55-ac11-e9d52849658a"

New/Edited policies (Delete if not relevant)

id = "CKV_AZURE_247"
name = "Ensure that Azure Cognitive Services account hosted with OpenAI is configured with data loss prevention"

• checks that outbound_network_access_restricted is restricted or the fqdns are restricted.

Description

Check that the cognitive service is either restricted to no access to outbound network, or is restricted to specific fqdns.

Fix

Either set outbound_network_access_restricted = true, or fqdns = [...].

Checklist:

• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have added tests that prove my feature, policy, or fix is effective and works
• New and existing tests pass locally with my changes

---

---

Generated description

Below is a concise technical summary of the changes proposed in this PR:

Implements a new check for Azure Cognitive Services accounts hosted with OpenAI to ensure data loss prevention. Adds a new class OpenAICognitiveServicesRestrictOutboundNetwork that checks if the outbound network access is restricted or if specific FQDNs are set. Creates test cases to verify the functionality of the new check, including both passing and failing scenarios.

Topic	Details
Test cases	Adds test cases and examples for the new OpenAI Cognitive Services security check Modified files (2) tests/terraform/checks/resource/azure/test_OpenAICognitiveServicesRestrictedOutboundNetwork.py tests/terraform/checks/resource/azure/example_OpenAICognitiveServicesRestrictOutboundNetwork/main.tf Latest Contributors(0) User Commit Date
New security check	Implements a new security check for Azure Cognitive Services OpenAI accounts to ensure data loss prevention Modified files (1) checkov/terraform/checks/resource/azure/OpenAICognitiveServicesRestrictOutboundNetwork.py Latest Contributors(0) User Commit Date

This pull request is reviewed by Baz. Join @tjwald and the rest of your team on (Baz).

[tsmithv11]

Looks good! Small title change suggestion

[SteveVaknin]

Nice! 💯

fixed all requested changes