Azure / Azure/template-analyzer

[Built-in Rule] Auditing on SQL server should be enabled

Open
#54 0 comments 0 reactions 0 assignees View on GitHub
✔ copy resources ✔ equals ✔ regex ✔ where ❌ parameters built-in rule
Dominant language
C#
Stars
143
Forks
47
PR merge metrics
No merged PRs in 30d

Description

Azure policy: https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/SQL/SqlServerAuditing_Audit.json

``` javascript
{
"name": "SQL_Auditing_Enabled",
"description": "Auditing on SQL server should be enabled",
"recommendation": "Enable auditing on your SQL Server",
"helpUri": "https://github.com/Azure/template-analyzer/docs/built-in-bpa-rules.md/#auditing-on-sql-server-should-be-enabled",
"parameters": {
"setting": "defaultSetting"
},
"evaluation": {
"resourceType": "Microsoft.Sql/servers",
"where": {
"path": "kind",
"regex": "^((?!analytics).)*$"
},
"evaluate": {
"resourceType": "Microsoft.Sql/servers/auditingSettings",
"path": "properties.auditingSettings.state",
"equals": "[parameters('setting')]"
}
}
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.