-
Notifications
You must be signed in to change notification settings - Fork 980
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Fix for updated policy in Deploy-SQL-Security (#1654)
- Loading branch information
1 parent
abfe29a
commit 42e0111
Showing
5 changed files
with
205 additions
and
64 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
122 changes: 62 additions & 60 deletions
122
eslzArm/managementGroupTemplates/policyDefinitions/initiatives.json
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
135 changes: 135 additions & 0 deletions
135
src/resources/Microsoft.Authorization/policySetDefinitions/Deploy-Sql-Security_20240529.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,135 @@ | ||
| { | ||
| "name": "Deploy-Sql-Security_20240529", | ||
| "type": "Microsoft.Authorization/policySetDefinitions", | ||
| "apiVersion": "2021-06-01", | ||
| "scope": null, | ||
| "properties": { | ||
| "policyType": "Custom", | ||
| "displayName": "Deploy SQL Database built-in SQL security configuration", | ||
| "description": "Deploy auditing, Alert, TDE and SQL vulnerability to SQL Databases when it not exist in the deployment", | ||
| "metadata": { | ||
| "version": "1.0.0", | ||
| "category": "SQL", | ||
| "source": "https://github.com/Azure/Enterprise-Scale/", | ||
| "replacesPolicy": "Deploy-Sql-Security", | ||
| "alzCloudEnvironments": [ | ||
| "AzureCloud", | ||
| "AzureChinaCloud", | ||
| "AzureUSGovernment" | ||
| ] | ||
| }, | ||
| "parameters": { | ||
| "vulnerabilityAssessmentsEmail": { | ||
| "metadata": { | ||
| "description": "The email address to send alerts", | ||
| "displayName": "The email address to send alerts" | ||
| }, | ||
| "type": "Array" | ||
| }, | ||
| "vulnerabilityAssessmentsStorageID": { | ||
| "metadata": { | ||
| "description": "The storage account ID to store assessments", | ||
| "displayName": "The storage account ID to store assessments" | ||
| }, | ||
| "type": "String" | ||
| }, | ||
| "SqlDbTdeDeploySqlSecurityEffect": { | ||
| "type": "String", | ||
| "defaultValue": "DeployIfNotExists", | ||
| "allowedValues": [ | ||
| "DeployIfNotExists", | ||
| "Disabled" | ||
| ], | ||
| "metadata": { | ||
| "displayName": "Deploy SQL Database Transparent Data Encryption ", | ||
| "description": "Deploy the Transparent Data Encryption when it is not enabled in the deployment" | ||
| } | ||
| }, | ||
| "SqlDbSecurityAlertPoliciesDeploySqlSecurityEffect": { | ||
| "type": "String", | ||
| "defaultValue": "DeployIfNotExists", | ||
| "allowedValues": [ | ||
| "DeployIfNotExists", | ||
| "Disabled" | ||
| ], | ||
| "metadata": { | ||
| "displayName": "Deploy SQL Database security Alert Policies configuration with email admin accounts", | ||
| "description": "Deploy the security Alert Policies configuration with email admin accounts when it not exist in current configuration" | ||
| } | ||
| }, | ||
| "SqlDbAuditingSettingsDeploySqlSecurityEffect": { | ||
| "type": "String", | ||
| "defaultValue": "DeployIfNotExists", | ||
| "allowedValues": [ | ||
| "DeployIfNotExists", | ||
| "Disabled" | ||
| ], | ||
| "metadata": { | ||
| "displayName": "Deploy SQL database auditing settings", | ||
| "description": "Deploy auditing settings to SQL Database when it not exist in the deployment" | ||
| } | ||
| }, | ||
| "SqlDbVulnerabilityAssessmentsDeploySqlSecurityEffect": { | ||
| "type": "String", | ||
| "defaultValue": "DeployIfNotExists", | ||
| "allowedValues": [ | ||
| "DeployIfNotExists", | ||
| "Disabled" | ||
| ], | ||
| "metadata": { | ||
| "displayName": "Deploy SQL Database vulnerability Assessments", | ||
| "description": "Deploy SQL Database vulnerability Assessments when it not exist in the deployment. To the specific storage account in the parameters" | ||
| } | ||
| } | ||
| }, | ||
| "policyDefinitions": [ | ||
| { | ||
| "policyDefinitionReferenceId": "SqlDbTdeDeploySqlSecurity", | ||
| "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f", | ||
| "parameters": { | ||
| "effect": { | ||
| "value": "[[parameters('SqlDbTdeDeploySqlSecurityEffect')]" | ||
| } | ||
| }, | ||
| "groupNames": [] | ||
| }, | ||
| { | ||
| "policyDefinitionReferenceId": "SqlDbSecurityAlertPoliciesDeploySqlSecurity", | ||
| "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-Sql-SecurityAlertPolicies", | ||
| "parameters": { | ||
| "effect": { | ||
| "value": "[[parameters('SqlDbSecurityAlertPoliciesDeploySqlSecurityEffect')]" | ||
| } | ||
| }, | ||
| "groupNames": [] | ||
| }, | ||
| { | ||
| "policyDefinitionReferenceId": "SqlDbAuditingSettingsDeploySqlSecurity", | ||
| "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-Sql-AuditingSettings", | ||
| "parameters": { | ||
| "effect": { | ||
| "value": "[[parameters('SqlDbAuditingSettingsDeploySqlSecurityEffect')]" | ||
| } | ||
| }, | ||
| "groupNames": [] | ||
| }, | ||
| { | ||
| "policyDefinitionReferenceId": "SqlDbVulnerabilityAssessmentsDeploySqlSecurity", | ||
| "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-Sql-vulnerabilityAssessments_20230706", | ||
| "parameters": { | ||
| "effect": { | ||
| "value": "[[parameters('SqlDbVulnerabilityAssessmentsDeploySqlSecurityEffect')]" | ||
| }, | ||
| "vulnerabilityAssessmentsEmail": { | ||
| "value": "[[parameters('vulnerabilityAssessmentsEmail')]" | ||
| }, | ||
| "vulnerabilityAssessmentsStorageID": { | ||
| "value": "[[parameters('vulnerabilityAssessmentsStorageID')]" | ||
| } | ||
| }, | ||
| "groupNames": [] | ||
| } | ||
| ], | ||
| "policyDefinitionGroups": null | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters