Azure / Azure/template-analyzer

[Built-in Rule] SQL Auditing settings should have Action-Groups configured to capture critical activities

Open
#55 2 comments 0 reactions 0 assignees View on GitHub
✔ allOf ✔ array wildcard ✔ copy resources ✔ equals ✔ in ✔ where built-in rule
Dominant language
C#
Stars
143
Forks
47
PR merge metrics
No merged PRs in 30d

Description

Azure policy: https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/SQL/SqlServerAuditing_ActionsAndGroups_Audit.json

``` javascript
{
"name": "SQL_Auditing_Actions_And_Groups",
"description": "SQL Auditing settings should have Action-Groups configured to capture critical activities",
"recommendation": "The AuditActionsAndGroups property should contain at least SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, FAILED_DATABASE_AUTHENTICATION_GROUP, BATCH_COMPLETED_GROUP to ensure a thorough audit logging",
"helpUri": "https://github.com/Azure/template-analyzer/docs/built-in-bpa-rules.md/#sql-auditing-settings-should-have-action-groups-configured-to-capture-critical-activities",
"evaluation": {
"resourceType": "Microsoft.Sql/servers"
"allOf": [
{
"resourceType": "Microsoft.Sql/servers/auditingSettings",
"where": {
"path": "name",
"equals": "default"
},
"evaluate": {
"path": "properties.auditActionsAndGroups[*]",
"in": [
"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP",
"FAILED_DATABASE_AUTHENTICATION_GROUP",
"BATCH_COMPLETED_GROUP"
]
}
}
]
}
}
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.