def rule(event):
    if all(
        [
            event.deep_get("eventService", default="") == "admin.googleapis.com",
            event.deep_get("eventName", default="") == "CHANGE_APPLICATION_SETTING",
            event.deep_get("setting_name", default="").startswith("ContextAwareAccess"),
        ]
    ):
        return True
    return False
