AzPolicyAdvertizer

last sync: 2025-Jul-25 17:39:48 UTC

Configure Azure Defender for SQL servers on machines to be enabled

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Configure Azure Defender for SQL servers on machines to be enabled

50ea7265-7d8c-429e-9a7d-ca1f410191c3

Version

1.0.1
Details on versioning

Versioning

Versions supported for Versioning: 1
1.0.1
Built-in Versioning [Preview]

Category

Security Center
Microsoft Learn

Description

Azure Defender for SQL provides functionality for surfacing and mitigating potential database vulnerabilities, detecting anomalous activities that could indicate threats to SQL databases, and discovering and classifying sensitive data.

Cloud environments

AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown

Available in AzUSGov

Unknown, no evidence if Policy definition is/not available in AzureUSGovernment

Mode

All

Type

BuiltIn

Preview

False

Deprecated

False

Effect

Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled

RBAC role(s)

Role Name	Role Id
Security Admin	fb1c8493-542b-48eb-b624-b4c8fea62acd

Rule aliases

THEN-ExistenceCondition (1)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.Security/pricings/pricingTier	Microsoft.Security	pricings	properties.pricingTier	True		False

Rule resource types

IF (1)

Microsoft.Resources/subscriptions

THEN-Deployment (1)

Microsoft.Security/pricings

Compliance

The following 1 compliance controls are associated with this Policy definition 'Configure Azure Defender for SQL servers on machines to be enabled' (50ea7265-7d8c-429e-9a7d-ca1f410191c3)

Rows: 1-1 / 1
Columns:
Select all:
Control Domain
Control
Name
MetadataId
Category
Title
Owner
Requirements
Description
Info
Policy#
Close
Columns▼Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, **[empty]**, **[nonempty]**, **rgx:**
Learn more
TableFilter v0.7.3
https://www.tablefilter.com/
©2015-2025 Max Guglielmi
Close
?
Page of 1
Control Domain	Control	Name	MetadataId	Category	Title	Owner	Requirements	Description	Info	Policy#

	op.exp.6 Protection against harmful code	op.exp.6 Protection against harmful code	404 not found				n/a	n/a		61

Initiatives usage

Rows: 1-5 / 5
Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, **[empty]**, **[nonempty]**, **rgx:**
Learn more
TableFilter v0.7.3
https://www.tablefilter.com/
©2015-2025 Max Guglielmi
Close
?
Page of 1
Initiative DisplayName	Initiative Id	Initiative Category	State	Type	polSet in AzUSGov

[Deprecated]: Deploy Microsoft Defender for Cloud configuration	Deploy-MDFC-Config	Security Center	Deprecated	ALZ
Configure Microsoft Defender for Cloud plans	f08c57cd-dbd6-49a4-a85e-9ae77ac959b0	Security Center	GA	BuiltIn	unknown
Configure Microsoft Defender for Databases to be enabled	9d46421d-1a48-4636-8d1a-5525ed29172d	Security Center	GA	BuiltIn	unknown
Deploy Microsoft Defender for Cloud configuration	Deploy-MDFC-Config_20240319	Security Center	GA	ALZ
Spain ENS	175daf90-21e1-4fec-b745-7b4c909aa94c	Regulatory Compliance	GA	BuiltIn	unknown

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2023-05-01 17:41:52	change	Patch (1.0.0 > 1.0.1)
2021-07-30 15:17:20	add	50ea7265-7d8c-429e-9a7d-ca1f410191c3

JSON compare

compare mode: version left: version right:

1.0.0 → 1.0.1 RENAMED Viewed

@@ -3,9 +3,9 @@
     "policyType": "BuiltIn",
     "mode": "All",
     "description": "Azure Defender for SQL provides functionality for surfacing and mitigating potential database vulnerabilities, detecting anomalous activities that could indicate threats to SQL databases, and discovering and classifying sensitive data.",
     "metadata": {
-        "version": "1.0.0",
         "category": "Security Center"
     },
     "parameters": {
         "effect": {
@@ -56,9 +56,9 @@
                             "variables": {},
                             "resources": [
                                 {
                                     "type": "Microsoft.Security/pricings",
-                                    "apiVersion": "2018-06-01",
                                     "name": "SqlServerVirtualMachines",
                                     "properties": {
                                         "pricingTier": "Standard"
                                     }

     "policyType": "BuiltIn",
     "mode": "All",
     "description": "Azure Defender for SQL provides functionality for surfacing and mitigating potential database vulnerabilities, detecting anomalous activities that could indicate threats to SQL databases, and discovering and classifying sensitive data.",
     "metadata": {
+        "version": "1.0.1",
         "category": "Security Center"
     },
     "parameters": {
         "effect": {
                             "variables": {},
                             "resources": [
                                 {
                                     "type": "Microsoft.Security/pricings",
+                                    "apiVersion": "2023-01-01",
                                     "name": "SqlServerVirtualMachines",
                                     "properties": {
                                         "pricingTier": "Standard"
                                     }

JSON

api-version=2021-06-01
EPAC

{7 itemsdisplayName: "Configure Azure Defender for SQL servers on machines to be enabled",
policyType: "BuiltIn",
mode: "All",
description: "Azure Defender for SQL provides functionality for surfacing and mitigating potential database vulnerabilities, detecting anomalous activities that could indicate threats to SQL databases, and discovering and classifying sensitive data.",
metadata: {2 itemsversion: "1.0.1",
category: "Security Center"
},
parameters: {1 itemeffect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "Enable or disable the execution of the policy"
},
allowedValues: [2 items"DeployIfNotExists",
"Disabled"
],
defaultValue: "DeployIfNotExists"
}
},
policyRule: {2 itemsif: {1 itemallOf: [1 item{2 itemsfield: "type",
equals: "Microsoft.Resources/subscriptions"
}
]
},
then: {2 itemseffect: "[parameters('effect')]",
details: {7 itemstype: "Microsoft.Security/pricings",
name: "SqlServerVirtualMachines",
deploymentScope: "subscription",
existenceScope: "subscription",
roleDefinitionIds: [1 item"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd" Security Admin 
],
existenceCondition: {2 itemsfield: "Microsoft.Security/pricings/pricingTier",
equals: "Standard"
},
deployment: {2 itemslocation: "westeurope",
properties: {3 itemsmode: "incremental",
parameters: {},
template: {6 items$schema: "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
contentVersion: "1.0.0.0",
parameters: {},
variables: {},
resources: [1 item{4 itemstype: "Microsoft.Security/pricings",
apiVersion: "2023-01-01",
name: "SqlServerVirtualMachines",
properties: {1 itempricingTier: "Standard"
}
}
],
outputs: {}
}
}
}
}
}
}
}

Configure Azure Defender for SQL servers on machines to be enabled

Azure BuiltIn Policy definition

TableFilter v0.7.3

TableFilter v0.7.3