AzPolicyAdvertizer

last sync: 2022-May-24 16:30:29 UTC

Azure Policy definition

Configure SQL servers to have auditing enabled to Log Analytics workspace

Name

Configure SQL servers to have auditing enabled to Log Analytics workspace
Azure Portal

25da7dfb-0666-4a15-a8f5-402127efd8bb

Version

1.0.0
details on versioning

Category

SQL
Microsoft docs

Description

To ensure the operations performed against your SQL assets are captured, SQL servers should have auditing enabled. If auditing is not enabled, this policy will configure auditing events to flow to the specified Log Analytics workspace.

Mode

Indexed

Type

BuiltIn

Preview

FALSE

Deprecated

FALSE

Effect

Default: DeployIfNotExists
Allowed: (DeployIfNotExists, Disabled)

Used RBAC Role

Role Name	Role Id
Log Analytics Contributor	92aaf0da-9dab-42b6-94a3-d43ce8d16293
SQL Security Manager	056cd41c-7e88-42e1-933e-88ba6a50c9c3

Rule Aliases

THEN-ExistenceCondition (1)

Alias	Namespace	ResourceType	DefaultPath	Modifiable
Microsoft.Sql/servers/auditingSettings/state	Microsoft.Sql	servers/auditingSettings	properties.state	true

Rule ResourceTypes

IF (1)
Microsoft.Sql/servers
THEN-Deployment (1)
Microsoft.Sql/servers/auditingSettings

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2022-03-11 18:16:48	add	25da7dfb-0666-4a15-a8f5-402127efd8bb

Used in Initiatives

none

JSON