Azure / Azure/azure-quickstart-templates

vulnerabilityAssessments failing within the SQL Server template

Open
#6,355 9 comments 4 reactions 0 assignees View on GitHub
Dominant language
Bicep
Stars
14.9k
Forks
16.2k
Avg merge
6d 21h
Merged PRs (30d)
6

Description

101-sql-logical-server
[https://github.com/Azure/azure-quickstart-templates/blob/master/101-sql-logical-server/azuredeploy.json](url)

### Issue Details

When creating a SQL Server and adding the vulnerabilityAssessments element, the ARM execution reports an error:

```json
New-AzResourceGroupDeployment : 09:33:08 - Resource Microsoft.Sql/servers/vulnerabilityAssessments 'resourceGroupName_rg/vulnerabilityAssessments' failed with message '{
"error": {
"code": "VulnerabilityAssessmentADSIsDisabled",
"message": "Advanced Data Security should be enabled in order to use Vulnerability Assessment."
}
}'
```

Another user has logged this on StackOverflow
[https://stackoverflow.com/questions/57056770/vulnerability-assessment-enablement-on-azure-sql-server-through-arm-template](url)

For completeness, the ARM code I'm using is:

```json
{
"name": "vulnerabilityAssessments",
"type": "vulnerabilityAssessments",
"apiVersion": "2018-06-01-preview",
"dependsOn": [
"[parameters('database_server_name')]",
"[variables('advancedLoggingStorageName')]"
],
"properties": {
"storageContainerPath": "[concat(reference(resourceId('Microsoft.Storage/storageAccounts', variables('advancedLoggingStorageName'))).primaryEndpoints.blob, 'vulnerability-assessment')]",
"storageAccountAccessKey": "[listKeys(resourceId('Microsoft.Storage/storageAccounts', variables('advancedLoggingStorageName')), '2018-02-01').keys[0].value]",
"recurringScans": {
"isEnabled": true,
"emailSubscriptionAdmins": "true"
}
}
}
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Open 101-sql-logical-server/azuredeploy.json and inspect the vulnerabilityAssessments resource, its dependencies, and the reported VulnerabilityAssessmentADSIsDisabled error. Reproduce the deployment to determine the required template change; done means the SQL Server template deploys with vulnerability assessments without this error.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, sql
Domain
cloud, databases
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.