last sync: 2021-Sep-24 16:09:49 UTC

Azure Policy definition

[Deprecated]: Email notifications to admins should be enabled in SQL server advanced data security settings

Name [Deprecated]: Email notifications to admins should be enabled in SQL server advanced data security settings
Azure Portal
Id c8343d2f-fdc9-4a97-b76f-fc71d1163bfc
Version 1.0.0-deprecated
details on versioning
Category SQL
Microsoft docs
Description Audit that 'email notification to admins and subscription owners' is enabled in the SQL server advanced threat protection settings. This ensures that any detections of anomalous activities on SQL server are reported as soon as possible to the admins.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated True
Effect Default: Disabled
Allowed: (AuditIfNotExists, Disabled)
Used RBAC Role none
History
Date/Time (UTC ymd) (i) Change type Change detail
2020-08-05 13:05:29 change Previous DisplayName: [Deprecated]: Email notifications to admins and subscription owners should be enabled in SQL server advanced data security settings
2020-07-01 14:50:07 change Previous DisplayName: Email notifications to admins and subscription owners should be enabled in SQL server advanced data security settings
Used in Initiatives none
JSON
{
  "displayName": "[Deprecated]: Email notifications to admins should be enabled in SQL server advanced data security settings",
  "policyType": "BuiltIn",
  "mode": "Indexed",
  "description": "Audit that 'email notification to admins and subscription owners' is enabled in the SQL server advanced threat protection settings. This ensures that any detections of anomalous activities on SQL server are reported as soon as possible to the admins.",
  "metadata": {
    "version": "1.0.0-deprecated",
    "category": "SQL",
    "deprecated": true
  },
  "parameters": {
    "effect": {
      "type": "String",
      "metadata": {
        "displayName": "Effect",
        "description": "Enable or disable the execution of the policy"
      },
      "allowedValues": [
        "AuditIfNotExists",
        "Disabled"
      ],
      "defaultValue": "Disabled"
    }
  },
  "policyRule": {
    "if": {
      "field": "type",
      "equals": "Microsoft.Sql/servers"
    },
    "then": {
      "effect": "[parameters('effect')]",
      "details": {
        "type": "Microsoft.Sql/servers/securityAlertPolicies",
        "name": "default",
        "existenceCondition": {
          "field": "Microsoft.Sql/servers/securityAlertPolicies/emailAccountAdmins",
          "equals": "true"
        }
      }
    }
  }
}