def rule(event):
    if event.deep_get("operationName", default="") in [
        "MICROSOFT.KEYVAULT/VAULTS/SECRETS/WRITE",
        "MICROSOFT.KEYVAULT/VAULTS/SECRETS/DELETE",
        "MICROSOFT.KEYVAULT/VAULTS/SECRETS/BACKUP/ACTION",
        "MICROSOFT.KEYVAULT/VAULTS/SECRETS/PURGE/ACTION",
        "MICROSOFT.KEYVAULT/VAULTS/SECRETS/UPDATE/ACTION",
        "MICROSOFT.KEYVAULT/VAULTS/SECRETS/RECOVER/ACTION",
        "MICROSOFT.KEYVAULT/VAULTS/SECRETS/RESTORE/ACTION",
        "MICROSOFT.KEYVAULT/VAULTS/SECRETS/SETSECRET/ACTION",
    ]:
        return True
    return False
