AzPolicyAdvertizer

last sync: 2024-Apr-24 17:46:58 UTC

Synapse workspaces with SQL auditing to storage account destination should be configured with 90 days retention or higher

Azure BuiltIn Policy definition

Source Azure Portal
Display name Synapse workspaces with SQL auditing to storage account destination should be configured with 90 days retention or higher
Id 529ea018-6afc-4ed4-95bd-7c9ee47b00bc
Version 2.0.0
Details on versioning
Category Synapse
Microsoft Learn
Description For incident investigation purposes, we recommend setting the data retention for your Synapse workspace' SQL auditing to storage account destination to at least 90 days. Confirm that you are meeting the necessary retention rules for the regions in which you are operating. This is sometimes required for compliance with regulatory standards.
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
AuditIfNotExists
Allowed
AuditIfNotExists, Disabled
RBAC role(s) none
Rule aliases THEN-ExistenceCondition (3)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Synapse/workspaces/auditingSettings/isAzureMonitorTargetEnabled Microsoft.Synapse workspaces/auditingSettings properties.isAzureMonitorTargetEnabled false
Microsoft.Synapse/workspaces/auditingSettings/retentionDays Microsoft.Synapse workspaces/auditingSettings properties.retentionDays false
Microsoft.Synapse/workspaces/auditingSettings/storageEndpoint Microsoft.Synapse workspaces/auditingSettings properties.storageEndpoint false
Rule resource types IF (1)
Microsoft.Synapse/workspaces
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2021-03-24 14:32:48 change Major (1.0.0 > 2.0.0)
2021-03-09 14:37:41 add 529ea018-6afc-4ed4-95bd-7c9ee47b00bc
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC