AzPolicyAdvertizer

last sync: 2025-Oct-31 18:22:59 UTC

Configure SQL Virtual Machines to automatically install Microsoft Defender for SQL and DCR with a user-defined LA workspace

Azure BuiltIn Policy definition

Source Azure Portal
Display name Configure SQL Virtual Machines to automatically install Microsoft Defender for SQL and DCR with a user-defined LA workspace
Id 04754ef9-9ae3-4477-bf17-86ef50026304
Version 1.10.0
Details on versioning
Versioning Versions supported for Versioning: 9
1.10.0
1.9.0
1.8.0
1.7.0
1.6.0
1.5.0
1.4.0
1.3.1
1.3.0-preview
Built-in Versioning [Preview]
Category Security Center
Microsoft Learn
Description Microsoft Defender for SQL collects events from the agent and uses them to provide security alerts and tailored hardening tasks (recommendations). Create a resource group and a Data Collection Rule in the same region as the user-defined Log Analytics workspace.
Cloud environments AzureCloud = true
AzureUSGovernment = true
AzureChinaCloud = unknown
Available in AzUSGov The Policy is available in AzureUSGovernment cloud. Version: '1.9.0'
Repository: Azure-Policy 04754ef9-9ae3-4477-bf17-86ef50026304
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Contributor b24988ac-6180-42a0-ab88-20f7382dd24c
Rule aliases THEN-Details (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.SqlVirtualMachine/SqlVirtualMachines/virtualMachineResourceId Microsoft.SqlVirtualMachine SqlVirtualMachines properties.virtualMachineResourceId True False
THEN-ExistenceCondition (3)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Compute/virtualMachines/extensions/provisioningState Microsoft.Compute virtualMachines/extensions properties.provisioningState True False
Microsoft.Compute/virtualMachines/extensions/publisher Microsoft.Compute virtualMachines/extensions properties.publisher True False
Microsoft.Compute/virtualMachines/extensions/type Microsoft.Compute virtualMachines/extensions properties.type True False
Rule resource types IF (1)
THEN-Deployment (4)
Compliance
The following 1 compliance controls are associated with this Policy definition 'Configure SQL Virtual Machines to automatically install Microsoft Defender for SQL and DCR with a user-defined LA workspace' (04754ef9-9ae3-4477-bf17-86ef50026304)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
op.exp.6 Protection against harmful code op.exp.6 Protection against harmful code 404 not found n/a n/a 61
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type polSet in AzUSGov
Configure SQL VMs and Arc-enabled SQL Servers to install Microsoft Defender for SQL and AMA with a user-defined LA workspace de01d381-bae9-4670-8870-786f89f49e26 Security Center GA BuiltIn true
Spain ENS 175daf90-21e1-4fec-b745-7b4c909aa94c Regulatory Compliance GA BuiltIn unknown
History
Date/Time (UTC ymd) (i) Change type Change detail
2025-01-21 19:02:36 change Minor (1.9.0 > 1.10.0)
2024-10-31 18:50:28 change Minor (1.8.0 > 1.9.0)
2024-09-10 17:48:30 change Minor (1.7.0 > 1.8.0)
2024-06-10 18:18:08 change Minor (1.6.0 > 1.7.0)
2024-05-13 17:44:58 change Minor (1.5.0 > 1.6.0)
2024-04-22 16:32:55 change Minor (1.4.0 > 1.5.0)
2024-01-12 18:35:06 change Minor (1.3.1 > 1.4.0)
2023-11-17 19:29:28 change Patch, old suffix: preview (1.3.0-preview > 1.3.1)
2023-10-31 19:02:40 change Minor, suffix remains equal (1.2.0-preview > 1.3.0-preview)
2023-09-11 17:59:12 change Minor, suffix remains equal (1.1.0-preview > 1.2.0-preview)
2023-08-22 17:59:24 add 04754ef9-9ae3-4477-bf17-86ef50026304
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC