Source
Azure Landing Zones (ALZ) GitHub Deploy-Sql-Security
Display name [Deprecated]: Deploy SQL Database built-in SQL security configuration Id Deploy-Sql-Security Version 1.0.0-deprecated Category SQL Description Deploy auditing, Alert, TDE and SQL vulnerability to SQL Databases when it not exist in the deployment. Superseded by https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Deploy-Sql-Security_20240529.html
Cloud environments
AzureChinaCloud
Type Custom Azure Landing Zones (ALZ) Deprecated True Preview False
SupersededBy
This ALZ PolicySet definition is superseded by Deploy SQL Database built-in SQL security configuration (Deploy-Sql-Security_20240529) Custom Azure Landing Zones (ALZ)
Policy-used summaryHide
Policy types
Policy states
Policy categories
Total Policies: 4
Deprecated: 1
1 categories:
SQL: 4
Policy-usedHide
Records: 10 25 100 200 Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
< ,
<= ,
> ,
>= ,
= ,
* ,
! ,
{ ,
} ,
|| ,
&& ,
[empty] ,
[nonempty] ,
rgx: Learn more ? Page 1 of 1
Clear SQL Clear Deprecated GA Clear ALZ BuiltIn
Policy DisplayName
Policy Id
Category
Effect
Roles#
Roles
State
Type
policy in AzUSGov
[Deprecated]: Deploy SQL Database vulnerability Assessments
Deploy-Sql-vulnerabilityAssessments SQL
Default Allowed 3
Monitoring Contributor , SQL Security Manager , Storage Account Contributor Deprecated
ALZ
Deploy SQL database auditing settings
Deploy-Sql-AuditingSettings SQL
Default Allowed 1
SQL Security Manager GA
ALZ
Deploy SQL Database security Alert Policies configuration with email admin accounts
Deploy-Sql-SecurityAlertPolicies SQL
Default Allowed 1
SQL Security Manager GA
ALZ
Deploy SQL DB transparent data encryption
86a912f6-9a06-4e26-b447-11b16ba8659f SQL
Default Allowed 1
SQL DB Contributor GA
BuiltIn
true
No results
Roles usedHide
Total Roles usage: 6
Total Roles unique usage: 4
History none
JSON compareHide
compare mode:
side-by-side
line-by-line
version left: 1.0.0 version right: 1.0.0-deprecated 1.0.0
@@ -1,12 +1,14 @@
1
{
2
"policyType": "Custom",
3
-
"displayName": "Deploy SQL Database built-in SQL security configuration",
4
-
"description": "Deploy auditing, Alert, TDE and SQL vulnerability to SQL Databases when it not exist in the deployment",
5
"metadata": {
6
-
"version": "1.0.0",
7
"category": "SQL",
8
"source": "https://github.com/Azure/Enterprise-Scale/",
9
"alzCloudEnvironments": [
10
"AzureCloud",
11
"AzureChinaCloud",
12
"AzureUSGovernment"
1
{
2
"policyType": "Custom",
3
+
"displayName": "[Deprecated]: Deploy SQL Database built-in SQL security configuration",
4
+
"description": "Deploy auditing, Alert, TDE and SQL vulnerability to SQL Databases when it not exist in the deployment. Superseded by https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Deploy-Sql-Security_20240529.html ",
5
"metadata": {
6
+
"version": "1.0.0-deprecated ",
7
"category": "SQL",
8
"source": "https://github.com/Azure/Enterprise-Scale/",
9
+
"deprecated": true,
10
+
"supersededBy": "Deploy-Sql-Security_20240529",
11
"alzCloudEnvironments": [
12
"AzureCloud",
13
"AzureChinaCloud",
14
"AzureUSGovernment"
JSON
Copy definition Copy definition 4 EPAC EPAC
{ 7 items policyType: "Custom" , displayName: "[Deprecated]: Deploy SQL Database built-in SQL security configuration" , description: "Deploy auditing, Alert, TDE and SQL vulnerability to SQL Databases when it not exist in the deployment. Superseded by https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Deploy-Sql-Security_20240529.html" , metadata: { 6 items version: "1.0.0-deprecated" , category: "SQL" , source: "https://github.com/Azure/Enterprise-Scale/" , deprecated: true , supersededBy: "Deploy-Sql-Security_20240529" , alzCloudEnvironments: [ 3 items "AzureCloud" , "AzureChinaCloud" , "AzureUSGovernment" ] } , parameters: { 6 items vulnerabilityAssessmentsEmail: { 2 items metadata: { 2 items description: "The email address to send alerts" , displayName: "The email address to send alerts" } , type: "String" } , vulnerabilityAssessmentsStorageID: { 2 items metadata: { 2 items description: "The storage account ID to store assessments" , displayName: "The storage account ID to store assessments" } , type: "String" } , SqlDbTdeDeploySqlSecurityEffect: { 4 items type: "String" , defaultValue: "DeployIfNotExists" , allowedValues: [ 2 items "DeployIfNotExists" , "Disabled" ] , metadata: { 2 items displayName: "Deploy SQL Database Transparent Data Encryption " , description: "Deploy the Transparent Data Encryption when it is not enabled in the deployment" } } , SqlDbSecurityAlertPoliciesDeploySqlSecurityEffect: { 4 items type: "String" , defaultValue: "DeployIfNotExists" , allowedValues: [ 2 items "DeployIfNotExists" , "Disabled" ] , metadata: { 2 items displayName: "Deploy SQL Database security Alert Policies configuration with email admin accounts" , description: "Deploy the security Alert Policies configuration with email admin accounts when it not exist in current configuration" } } , SqlDbAuditingSettingsDeploySqlSecurityEffect: { 4 items type: "String" , defaultValue: "DeployIfNotExists" , allowedValues: [ 2 items "DeployIfNotExists" , "Disabled" ] , metadata: { 2 items displayName: "Deploy SQL database auditing settings" , description: "Deploy auditing settings to SQL Database when it not exist in the deployment" } } , SqlDbVulnerabilityAssessmentsDeploySqlSecurityEffect: { 4 items type: "String" , defaultValue: "DeployIfNotExists" , allowedValues: [ 2 items "DeployIfNotExists" , "Disabled" ] , metadata: { 2 items displayName: "Deploy SQL Database vulnerability Assessments" , description: "Deploy SQL Database vulnerability Assessments when it not exist in the deployment. To the specific storage account in the parameters" } } } , policyDefinitions: [ 4 items { 4 items } , { 4 items policyDefinitionReferenceId: "SqlDbSecurityAlertPoliciesDeploySqlSecurity" , policyDefinitionId: "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-Sql-SecurityAlertPolicies" , parameters: { 1 item effect: { 1 item value: "[parameters('SqlDbSecurityAlertPoliciesDeploySqlSecurityEffect')]" } } , groupNames: [] } , { 4 items policyDefinitionReferenceId: "SqlDbAuditingSettingsDeploySqlSecurity" , policyDefinitionId: "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-Sql-AuditingSettings" , parameters: { 1 item effect: { 1 item value: "[parameters('SqlDbAuditingSettingsDeploySqlSecurityEffect')]" } } , groupNames: [] } , { 4 items policyDefinitionReferenceId: "SqlDbVulnerabilityAssessmentsDeploySqlSecurity" , policyDefinitionId: "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-Sql-vulnerabilityAssessments" , parameters: { 3 items } , groupNames: [] } ] , policyDefinitionGroups: null }
