AzPolicyAdvertizer

last sync: 2025-Jul-29 17:42:17 UTC

Configure Advanced Threat Protection to be enabled on Azure database for PostgreSQL flexible servers

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Configure Advanced Threat Protection to be enabled on Azure database for PostgreSQL flexible servers

2a6ae02f-7590-40d7-88ba-b18e205a32fd

Version

1.1.0
Details on versioning

Versioning

Versions supported for Versioning: 2
1.1.0
1.0.0
Built-in Versioning [Preview]

Category

Security Center
Microsoft Learn

Description

Enable Advanced Threat Protection on your Azure database for PostgreSQL flexible servers to detect anomalous activities indicating unusual and potentially harmful attempts to access or exploit databases.

Cloud environments

AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown

Available in AzUSGov

Unknown, no evidence if Policy definition is/not available in AzureUSGovernment

Mode

Indexed

Type

BuiltIn

Preview

False

Deprecated

False

Effect

Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled

RBAC role(s)

Role Name	Role Id
Contributor	b24988ac-6180-42a0-ab88-20f7382dd24c

Rule aliases

THEN-ExistenceCondition (1)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.DBforPostgreSQL/flexibleServers/advancedThreatProtectionSettings/state	Microsoft.DBforPostgreSQL	flexibleServers/advancedThreatProtectionSettings	properties.state	True		False

Rule resource types

IF (1)

Microsoft.DBforPostgreSQL/flexibleservers

THEN-Deployment (1)

Microsoft.DBforPostgreSQL/flexibleservers/advancedThreatProtectionSettings

Compliance

Not a Compliance control

Initiatives usage

Rows: 1-1 / 1
Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, **[empty]**, **[nonempty]**, **rgx:**
Learn more
TableFilter v0.7.3
https://www.tablefilter.com/
©2015-2025 Max Guglielmi
Close
?
Page of 1
Initiative DisplayName	Initiative Id	Initiative Category	State	Type	polSet in AzUSGov

Configure Advanced Threat Protection to be enabled on open-source relational databases	e77fc0b3-f7e9-4c58-bc13-cb753ed8e46e	Security Center	GA	BuiltIn	unknown

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2024-01-22 17:47:54	change	Minor (1.0.0 > 1.1.0)
2023-12-14 19:23:04	add	2a6ae02f-7590-40d7-88ba-b18e205a32fd

JSON compare

compare mode: version left: version right:

1.0.0 → 1.1.0 RENAMED Viewed

@@ -3,9 +3,9 @@
     "policyType": "BuiltIn",
     "mode": "Indexed",
     "description": "Enable Advanced Threat Protection on your Azure database for PostgreSQL flexible servers to detect anomalous activities indicating unusual and potentially harmful attempts to access or exploit databases.",
     "metadata": {
-        "version": "1.0.0",
         "category": "Security Center"
     },
     "parameters": {
         "effect": {
@@ -30,9 +30,9 @@
             "effect": "[parameters('effect')]",
             "details": {
                 "type": "Microsoft.DBforPostgreSQL/flexibleservers/advancedThreatProtectionSettings",
                 "name": "Default",
-                "evaluationDelay": "AfterProvisioning",
                 "existenceCondition": {
                     "field": "Microsoft.DBforPostgreSQL/flexibleServers/advancedThreatProtectionSettings/state",
                     "equals": "Enabled"
                 },

     "policyType": "BuiltIn",
     "mode": "Indexed",
     "description": "Enable Advanced Threat Protection on your Azure database for PostgreSQL flexible servers to detect anomalous activities indicating unusual and potentially harmful attempts to access or exploit databases.",
     "metadata": {
+        "version": "1.1.0",
         "category": "Security Center"
     },
     "parameters": {
         "effect": {
             "effect": "[parameters('effect')]",
             "details": {
                 "type": "Microsoft.DBforPostgreSQL/flexibleservers/advancedThreatProtectionSettings",
                 "name": "Default",
+                "evaluationDelay": "AfterProvisioningSuccess",
                 "existenceCondition": {
                     "field": "Microsoft.DBforPostgreSQL/flexibleServers/advancedThreatProtectionSettings/state",
                     "equals": "Enabled"
                 },

JSON

api-version=2021-06-01
EPAC

{7 itemsdisplayName: "Configure Advanced Threat Protection to be enabled on Azure database for PostgreSQL flexible servers",
policyType: "BuiltIn",
mode: "Indexed",
description: "Enable Advanced Threat Protection on your Azure database for PostgreSQL flexible servers to detect anomalous activities indicating unusual and potentially harmful attempts to access or exploit databases.",
metadata: {2 itemsversion: "1.1.0",
category: "Security Center"
},
parameters: {1 itemeffect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "Enable or disable the execution of the policy"
},
allowedValues: [2 items"DeployIfNotExists",
"Disabled"
],
defaultValue: "DeployIfNotExists"
}
},
policyRule: {2 itemsif: {2 itemsfield: "type",
equals: "Microsoft.DBforPostgreSQL/flexibleservers"
},
then: {2 itemseffect: "[parameters('effect')]",
details: {6 itemstype: "Microsoft.DBforPostgreSQL/flexibleservers/advancedThreatProtectionSettings",
name: "Default",
evaluationDelay: "AfterProvisioningSuccess",
existenceCondition: {2 itemsfield: "Microsoft.DBforPostgreSQL/flexibleServers/advancedThreatProtectionSettings/state",
equals: "Enabled"
},
roleDefinitionIds: [1 item"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" Contributor 
],
deployment: {1 itemproperties: {3 itemsmode: "incremental",
template: {5 items$schema: "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
contentVersion: "1.0.0.0",
parameters: {1 itemserverName: {1 itemtype: "string"
}
},
variables: {},
resources: [1 item{4 itemsname: 🔍"[
    concat(
        parameters('serverName'),
       '/Default'
    )
]",
type: "Microsoft.DBforPostgreSQL/flexibleservers/advancedThreatProtectionSettings",
apiVersion: "2023-06-01-preview",
properties: {1 itemstate: "Enabled"
}
}
]
},
parameters: {1 itemserverName: {1 itemvalue: "[field('name')]"
}
}
}
}
}
}
}
}

Configure Advanced Threat Protection to be enabled on Azure database for PostgreSQL flexible servers

Azure BuiltIn Policy definition

TableFilter v0.7.3