We are currently solving the following issue within our repository. Here is the issue text:
--- BEGIN ISSUE ---
CKV_AZURE_234 condition is incorrect
https://github.com/bridgecrewio/checkov/blob/dc6a7cd84c5e006c289f2710b960b7be96a29fae/checkov/terraform/checks/resource/azure/AzureDefenderDisabledForResManager.py#L20C110-L20C118

The condition used in this check is being triggered for all `azurerm_security_center_subscription_pricing` resources with **any** `resource_type`. For example, 

```
resource "azurerm_security_center_subscription_pricing" "mdc_srvrs" {
  tier          = "Standard"
  resource_type = "VirtualMachines"
  subplan       = "P2"
```

Would raise the `CKV_AZURE_234` finding. For any other `resource_type` we get a failure.

--- END ISSUE ---

Below are some code segments, each from a relevant file. One or more of these files may contain bugs.
--- BEGIN FILES ---
Path: `checkov/terraform/checks/resource/azure/AzureDefenderDisabledForResManager.py`
Content:
```
1 from __future__ import annotations
2 
3 from typing import Any
4 
5 from checkov.common.models.enums import CheckCategories, CheckResult
6 from checkov.terraform.checks.resource.base_resource_check import BaseResourceCheck
7 
8 
9 class AzureDefenderDisabledForResManager(BaseResourceCheck):
10     def __init__(self) -> None:
11         name = "Ensure that Azure Defender for cloud is set to On for Resource Manager"
12         id = "CKV_AZURE_234"
13         supported_resources = ("azurerm_security_center_subscription_pricing",)
14         categories = (CheckCategories.GENERAL_SECURITY,)
15         super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)
16 
17     def scan_resource_conf(self, conf: dict[str, list[Any]]) -> CheckResult:
18         return (
19             CheckResult.PASSED
20             if conf.get("resource_type", [""])[0].lower() == "arm" and conf.get("tier", [""])[0].lower() == "standard"
21             else CheckResult.FAILED
22         )
23 
24     def get_evaluated_keys(self) -> list[str]:
25         return ["resource_type", "tier"]
26 
27 
28 check = AzureDefenderDisabledForResManager()
29
```
--- END FILES ---

Please first localize the bug based on the issue statement, and then generate a patch according to the `git diff` format fenced by three backticks.

Here is an example:

```diff
diff --git a/examples/server_async.py b/examples/server_async.py
--- a/examples/server_async.py
+++ b/examples/server_async.py
@@ -313,4 +313,4 @@
 
 
 if __name__ == "__main__":
-    asyncio.run(run_async_server("."), debug=True)
+    asyncio.run(run_async_server(), debug=True)
diff --git a/examples/server_sync.py b/examples/server_sync.py
--- a/examples/server_sync.py
+++ b/examples/server_sync.py
@@ -313,5 +313,5 @@
 
 
 if __name__ == "__main__":
-    server = run_sync_server(".")
+    server = run_sync_server()
     server.shutdown()

```

diff --git a/checkov/terraform/checks/resource/azure/AzureDefenderDisabledForResManager.py b/checkov/terraform/checks/resource/azure/AzureDefenderDisabledForResManager.py
--- a/checkov/terraform/checks/resource/azure/AzureDefenderDisabledForResManager.py
+++ b/checkov/terraform/checks/resource/azure/AzureDefenderDisabledForResManager.py
@@ -16,9 +16,9 @@
 
     def scan_resource_conf(self, conf: dict[str, list[Any]]) -> CheckResult:
         return (
-            CheckResult.PASSED
-            if conf.get("resource_type", [""])[0].lower() == "arm" and conf.get("tier", [""])[0].lower() == "standard"
-            else CheckResult.FAILED
+            CheckResult.FAILED
+            if conf.get("resource_type", [""])[0].lower() == "arm" and conf.get("tier", [""])[0].lower() != "standard"
+            else CheckResult.PASSED
         )
 
     def get_evaluated_keys(self) -> list[str]:

{"golden_diff": "diff --git a/checkov/terraform/checks/resource/azure/AzureDefenderDisabledForResManager.py b/checkov/terraform/checks/resource/azure/AzureDefenderDisabledForResManager.py\n--- a/checkov/terraform/checks/resource/azure/AzureDefenderDisabledForResManager.py\n+++ b/checkov/terraform/checks/resource/azure/AzureDefenderDisabledForResManager.py\n@@ -16,9 +16,9 @@\n \n     def scan_resource_conf(self, conf: dict[str, list[Any]]) -> CheckResult:\n         return (\n-            CheckResult.PASSED\n-            if conf.get(\"resource_type\", [\"\"])[0].lower() == \"arm\" and conf.get(\"tier\", [\"\"])[0].lower() == \"standard\"\n-            else CheckResult.FAILED\n+            CheckResult.FAILED\n+            if conf.get(\"resource_type\", [\"\"])[0].lower() == \"arm\" and conf.get(\"tier\", [\"\"])[0].lower() != \"standard\"\n+            else CheckResult.PASSED\n         )\n \n     def get_evaluated_keys(self) -> list[str]:\n", "issue": "CKV_AZURE_234 condition is incorrect\nhttps://github.com/bridgecrewio/checkov/blob/dc6a7cd84c5e006c289f2710b960b7be96a29fae/checkov/terraform/checks/resource/azure/AzureDefenderDisabledForResManager.py#L20C110-L20C118\r\n\r\nThe condition used in this check is being triggered for all `azurerm_security_center_subscription_pricing` resources with **any** `resource_type`. For example, \r\n\r\n```\r\nresource \"azurerm_security_center_subscription_pricing\" \"mdc_srvrs\" {\r\n  tier          = \"Standard\"\r\n  resource_type = \"VirtualMachines\"\r\n  subplan       = \"P2\"\r\n```\r\n\r\nWould raise the `CKV_AZURE_234` finding. For any other `resource_type` we get a failure.\n", "before_files": [{"content": "from __future__ import annotations\n\nfrom typing import Any\n\nfrom checkov.common.models.enums import CheckCategories, CheckResult\nfrom checkov.terraform.checks.resource.base_resource_check import BaseResourceCheck\n\n\nclass AzureDefenderDisabledForResManager(BaseResourceCheck):\n    def __init__(self) -> None:\n        name = \"Ensure that Azure Defender for cloud is set to On for Resource Manager\"\n        id = \"CKV_AZURE_234\"\n        supported_resources = (\"azurerm_security_center_subscription_pricing\",)\n        categories = (CheckCategories.GENERAL_SECURITY,)\n        super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)\n\n    def scan_resource_conf(self, conf: dict[str, list[Any]]) -> CheckResult:\n        return (\n            CheckResult.PASSED\n            if conf.get(\"resource_type\", [\"\"])[0].lower() == \"arm\" and conf.get(\"tier\", [\"\"])[0].lower() == \"standard\"\n            else CheckResult.FAILED\n        )\n\n    def get_evaluated_keys(self) -> list[str]:\n        return [\"resource_type\", \"tier\"]\n\n\ncheck = AzureDefenderDisabledForResManager()\n", "path": "checkov/terraform/checks/resource/azure/AzureDefenderDisabledForResManager.py"}], "after_files": [{"content": "from __future__ import annotations\n\nfrom typing import Any\n\nfrom checkov.common.models.enums import CheckCategories, CheckResult\nfrom checkov.terraform.checks.resource.base_resource_check import BaseResourceCheck\n\n\nclass AzureDefenderDisabledForResManager(BaseResourceCheck):\n    def __init__(self) -> None:\n        name = \"Ensure that Azure Defender for cloud is set to On for Resource Manager\"\n        id = \"CKV_AZURE_234\"\n        supported_resources = (\"azurerm_security_center_subscription_pricing\",)\n        categories = (CheckCategories.GENERAL_SECURITY,)\n        super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)\n\n    def scan_resource_conf(self, conf: dict[str, list[Any]]) -> CheckResult:\n        return (\n            CheckResult.FAILED\n            if conf.get(\"resource_type\", [\"\"])[0].lower() == \"arm\" and conf.get(\"tier\", [\"\"])[0].lower() != \"standard\"\n            else CheckResult.PASSED\n        )\n\n    def get_evaluated_keys(self) -> list[str]:\n        return [\"resource_type\", \"tier\"]\n\n\ncheck = AzureDefenderDisabledForResManager()\n", "path": "checkov/terraform/checks/resource/azure/AzureDefenderDisabledForResManager.py"}]}