AzPolicyAdvertizer

last sync: 2024-May-06 19:17:58 UTC

Configure Arc-enabled SQL Servers to automatically install Microsoft Defender for SQL and DCR with a user-defined LA workspace

Azure Landing Zones (ALZ) Policy definition

Source

Repository Azure Landing Zones (ALZ) GitHub
JSON Deploy-MDFC-Arc-Sql-DefenderSQL-DCR

Display name

Configure Arc-enabled SQL Servers to automatically install Microsoft Defender for SQL and DCR with a user-defined LA workspace

Deploy-MDFC-Arc-Sql-DefenderSQL-DCR

Version

1.0.0
Details on versioning

Category

Security Center

Description

Microsoft Defender for SQL collects events from the agent and uses them to provide security alerts and tailored hardening tasks (recommendations). Create a resource group and a Data Collection Rule in the same region as the user-defined Log Analytics workspace.

Mode

Indexed

Type

Custom Azure Landing Zones (ALZ)

Preview

False

Deprecated

False

Effect

Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled

RBAC role(s)

Role Name	Role Id
Contributor	b24988ac-6180-42a0-ab88-20f7382dd24c

Rule aliases

IF (2)

Alias	Namespace	ResourceType	DefaultPath	Modifiable
Microsoft.HybridCompute/machines/mssqlDiscovered	Microsoft.HybridCompute	machines	properties.mssqlDiscovered	false
Microsoft.HybridCompute/machines/osName	Microsoft.HybridCompute	machines	properties.osName	false

Rule resource types

IF (1)
Microsoft.HybridCompute/machines
THEN-Deployment (3)
Microsoft.Insights/dataCollectionRules
Microsoft.Resources/deployments
Microsoft.Resources/resourceGroups

Initiatives usage

Initiative DisplayName	Initiative Id	Initiative Category	State
Configure SQL VMs and Arc-enabled SQL Servers to install Microsoft Defender for SQL and AMA with a user-defined LA workspace	Deploy-MDFC-DefenderSQL-AMA	Security Center	GA

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2024-01-31 19:57:15	add	Deploy-MDFC-Arc-Sql-DefenderSQL-DCR

JSON compare

n/a

JSON

EPAC