output/20260723_081532/govviz/ALZ_20260723_081601/Enterprise-Scale/src/resources/Microsoft.Authorization/policySetDefinitions/Deploy-Sql-Security_20240529.json
|
{ "name": "Deploy-Sql-Security_20240529", "type": "Microsoft.Authorization/policySetDefinitions", "apiVersion": "2023-04-01", "scope": null, "properties": { "policyType": "Custom", "displayName": "Deploy SQL Database built-in SQL security configuration", "description": "Deploy auditing, Alert, TDE and SQL vulnerability to SQL Databases when it not exist in the deployment", "metadata": { "version": "1.1.0", "category": "SQL", "source": "https://github.com/Azure/Enterprise-Scale/", "replacesPolicy": "Deploy-Sql-Security", "alzCloudEnvironments": [ "AzureCloud", "AzureChinaCloud", "AzureUSGovernment" ] }, "parameters": { "vulnerabilityAssessmentsEmail": { "metadata": { "description": "The email address to send alerts", "displayName": "The email address to send alerts" }, "type": "Array" }, "vulnerabilityAssessmentsStorageID": { "metadata": { "description": "The storage account ID to store assessments", "displayName": "The storage account ID to store assessments" }, "type": "String" }, "SqlDbTdeDeploySqlSecurityEffect": { "type": "String", "defaultValue": "DeployIfNotExists", "allowedValues": [ "DeployIfNotExists", "Disabled" ], "metadata": { "displayName": "Deploy SQL Database Transparent Data Encryption ", "description": "Deploy the Transparent Data Encryption when it is not enabled in the deployment" } }, "SqlDbSecurityAlertPoliciesDeploySqlSecurityEffect": { "type": "String", "defaultValue": "DeployIfNotExists", "allowedValues": [ "DeployIfNotExists", "Disabled" ], "metadata": { "displayName": "Deploy SQL Database security Alert Policies configuration with email admin accounts", "description": "Deploy the security Alert Policies configuration with email admin accounts when it not exist in current configuration" } }, "SqlDbAuditingSettingsDeploySqlSecurityEffect": { "type": "String", "defaultValue": "DeployIfNotExists", "allowedValues": [ "DeployIfNotExists", "Disabled" ], "metadata": { "displayName": "Deploy SQL database auditing settings", "description": "Deploy auditing settings to SQL Database when it not exist in the deployment" } }, "SqlDbVulnerabilityAssessmentsDeploySqlSecurityEffect": { "type": "String", "defaultValue": "DeployIfNotExists", "allowedValues": [ "DeployIfNotExists", "Disabled" ], "metadata": { "displayName": "Deploy SQL Database vulnerability Assessments", "description": "Deploy SQL Database vulnerability Assessments when it not exist in the deployment. To the specific storage account in the parameters" } } }, "policyDefinitions": [ { "policyDefinitionReferenceId": "SqlDbTdeDeploySqlSecurity", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[[parameters('SqlDbTdeDeploySqlSecurityEffect')]" } }, "groupNames": [] }, { "policyDefinitionReferenceId": "SqlDbSecurityAlertPoliciesDeploySqlSecurity", "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-Sql-SecurityAlertPolicies", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[[parameters('SqlDbSecurityAlertPoliciesDeploySqlSecurityEffect')]" } }, "groupNames": [] }, { "policyDefinitionReferenceId": "SqlDbAuditingSettingsDeploySqlSecurity", "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-Sql-AuditingSettings", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[[parameters('SqlDbAuditingSettingsDeploySqlSecurityEffect')]" } }, "groupNames": [] }, { "policyDefinitionReferenceId": "SqlDbVulnerabilityAssessmentsDeploySqlSecurity", "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-Sql-vulnerabilityAssessments_20230706", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[[parameters('SqlDbVulnerabilityAssessmentsDeploySqlSecurityEffect')]" }, "vulnerabilityAssessmentsEmail": { "value": "[[parameters('vulnerabilityAssessmentsEmail')]" }, "vulnerabilityAssessmentsStorageID": { "value": "[[parameters('vulnerabilityAssessmentsStorageID')]" } }, "groupNames": [] } ], "policyDefinitionGroups": null } } |