-
Notifications
You must be signed in to change notification settings - Fork 1.1k
/
MDC_DFSQL_AMA_Migration_Audit.json
68 lines (68 loc) · 2.28 KB
/
MDC_DFSQL_AMA_Migration_Audit.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
{
"properties": {
"displayName": "SQL server-targeted autoprovisioning should be enabled for SQL servers on machines plan",
"description": "To ensure your SQL VMs and Arc-enabled SQL Servers are protected, ensure the SQL-targeted Azure Monitoring Agent is configured to automatically deploy. This is also necessary if you've previously configured autoprovisioning of the Microsoft Monitoring Agent, as that component is being deprecated. Learn more: https://aka.ms/SQLAMAMigration",
"policyType": "BuiltIn",
"mode": "All",
"version": "1.0.0",
"metadata": {
"version": "1.0.0",
"category": "Security Center"
},
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy"
},
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"defaultValue": "AuditIfNotExists"
}
},
"policyRule": {
"if": {
"allOf": [
{
"field": "type",
"equals": "Microsoft.Security/pricings"
},
{
"field": "name",
"equals": "sqlservervirtualmachines"
},
{
"field": "Microsoft.Security/pricings/pricingTier",
"equals": "standard"
}
]
},
"then": {
"effect": "[parameters('effect')]",
"details": {
"type": "Microsoft.Authorization/policyAssignments",
"existenceCondition": {
"anyOf": [
{
"field": "Microsoft.Authorization/policyAssignments/policyDefinitionId",
"equals": "/providers/Microsoft.Authorization/policySetDefinitions/de01d381-bae9-4670-8870-786f89f49e26"
},
{
"field": "Microsoft.Authorization/policyAssignments/policyDefinitionId",
"equals": "/providers/Microsoft.Authorization/policySetDefinitions/d7c3ea3a-edf3-4bd5-bd64-d5b635b05393"
}
]
}
}
}
},
"versions": [
"1.0.0"
]
},
"id": "/providers/Microsoft.Authorization/policyDefinitions/c6283572-73bb-4deb-bf2c-7a2b8f7462cb",
"name": "c6283572-73bb-4deb-bf2c-7a2b8f7462cb"
}