Azure / Azure/azure-quickstart-templates
vulnerabilityAssessments failing within the SQL Server template
- Dominant language
- Bicep
- Stars
- 14.9k
- Forks
- 16.2k
- Avg merge
- 6d 21h
- Merged PRs (30d)
- 6
Description
101-sql-logical-server
[https://github.com/Azure/azure-quickstart-templates/blob/master/101-sql-logical-server/azuredeploy.json](url)
### Issue Details
When creating a SQL Server and adding the vulnerabilityAssessments element, the ARM execution reports an error:
```json
New-AzResourceGroupDeployment : 09:33:08 - Resource Microsoft.Sql/servers/vulnerabilityAssessments 'resourceGroupName_rg/vulnerabilityAssessments' failed with message '{
"error": {
"code": "VulnerabilityAssessmentADSIsDisabled",
"message": "Advanced Data Security should be enabled in order to use Vulnerability Assessment."
}
}'
```
Another user has logged this on StackOverflow
[https://stackoverflow.com/questions/57056770/vulnerability-assessment-enablement-on-azure-sql-server-through-arm-template](url)
For completeness, the ARM code I'm using is:
```json
{
"name": "vulnerabilityAssessments",
"type": "vulnerabilityAssessments",
"apiVersion": "2018-06-01-preview",
"dependsOn": [
"[parameters('database_server_name')]",
"[variables('advancedLoggingStorageName')]"
],
"properties": {
"storageContainerPath": "[concat(reference(resourceId('Microsoft.Storage/storageAccounts', variables('advancedLoggingStorageName'))).primaryEndpoints.blob, 'vulnerability-assessment')]",
"storageAccountAccessKey": "[listKeys(resourceId('Microsoft.Storage/storageAccounts', variables('advancedLoggingStorageName')), '2018-02-01').keys[0].value]",
"recurringScans": {
"isEnabled": true,
"emailSubscriptionAdmins": "true"
}
}
}
```
Contributor guide
No contributing guide indexed for this repository
Research direction
Open 101-sql-logical-server/azuredeploy.json and inspect the vulnerabilityAssessments resource, its dependencies, and the reported VulnerabilityAssessmentADSIsDisabled error. Reproduce the deployment to determine the required template change; done means the SQL Server template deploys with vulnerability assessments without this error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, sql
- Domain
- cloud, databases
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100