AzPolicyAdvertizer

last sync: 2024-May-06 19:17:58 UTC

Configure Arc-enabled SQL Servers with Data Collection Rule Association to Microsoft Defender for SQL user-defined DCR

Azure Landing Zones (ALZ) Policy definition

Source Repository Azure Landing Zones (ALZ) GitHub
JSON Deploy-MDFC-Arc-SQL-DCR-Association
Display name Configure Arc-enabled SQL Servers with Data Collection Rule Association to Microsoft Defender for SQL user-defined DCR
Id Deploy-MDFC-Arc-SQL-DCR-Association
Version 1.0.0
Details on versioning
Category Security Center
Description Configure association between Arc-enabled SQL Servers and the Microsoft Defender for SQL user-defined DCR. Deleting this association will break the detection of security vulnerabilities for this Arc-enabled SQL Servers.
Mode Indexed
Type Custom Azure Landing Zones (ALZ)
Preview False
Deprecated False
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Monitoring Contributor 749f88d5-cbae-40b8-bcfc-e573ddc772fa
Log Analytics Contributor 92aaf0da-9dab-42b6-94a3-d43ce8d16293
Rule aliases IF (2)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.HybridCompute/machines/mssqlDiscovered Microsoft.HybridCompute machines properties.mssqlDiscovered false
Microsoft.HybridCompute/machines/osName Microsoft.HybridCompute machines properties.osName false
Rule resource types IF (1)
Microsoft.HybridCompute/machines
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State
Configure SQL VMs and Arc-enabled SQL Servers to install Microsoft Defender for SQL and AMA with a user-defined LA workspace Deploy-MDFC-DefenderSQL-AMA Security Center GA
History
Date/Time (UTC ymd) (i) Change type Change detail
2024-01-31 19:57:15 add Deploy-MDFC-Arc-SQL-DCR-Association
JSON compare n/a
JSON
EPAC