-
Notifications
You must be signed in to change notification settings - Fork 1.1k
/
Sql_servers_databases_ZoneRedundant_Audit.json
63 lines (63 loc) · 2.18 KB
/
Sql_servers_databases_ZoneRedundant_Audit.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
{
"properties": {
"displayName": "[Preview]: SQL Databases should be Zone Redundant",
"policyType": "BuiltIn",
"mode": "Indexed",
"description": "SQL Databases can be configured to be Zone Redundant or not. Databases with the 'zoneRedundant' setting set to 'false' are not configured for zone redundancy. This policy helps identify SQL databases that need zone redundancy configuration to enhance availability and resilience within Azure.",
"metadata": {
"category": "Resilience",
"version": "1.0.0-preview",
"preview": true
},
"version": "1.0.0-preview",
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "This parameter lets you choose the effect of the policy. If you choose Audit (default), the policy will only audit resources for compliance. If you choose Deny, the policy will deny the creation of non-compliant resources. If you choose Disabled, the policy will not enforce compliance (useful, for example, as a second assignment to ignore a subset of non-compliant resources in a single resource group)."
},
"allowedValues": [
"Audit",
"Deny",
"Disabled"
],
"defaultValue": "Audit"
}
},
"policyRule": {
"if": {
"allOf": [
{
"field": "type",
"equals": "Microsoft.Sql/servers/databases"
},
{
"anyOf": [
{
"field": "Microsoft.Sql/servers/databases/elasticPoolId",
"exists": false
},
{
"field": "Microsoft.Sql/servers/databases/elasticPoolId",
"equals": ""
}
]
},
{
"field": "Microsoft.Sql/servers/databases/zoneRedundant",
"notEquals": "true"
}
]
},
"then": {
"effect": "[parameters('effect')]"
}
},
"versions": [
"1.0.0-PREVIEW"
]
},
"id": "/providers/Microsoft.Authorization/policyDefinitions/6221cac0-bb8d-40f4-9535-5d03f713f054",
"name": "6221cac0-bb8d-40f4-9535-5d03f713f054"
}