AzPolicyAdvertizer

last sync: 2025-Jul-07 17:23:16 UTC

Azure SQL Database should have the minimal TLS version set to the highest version

Azure Landing Zones (ALZ) Policy definition

Source Repository Azure Landing Zones (ALZ) GitHub
JSON Deny-Sql-minTLS
Deploy policy Deny-Sql-minTLS (1.1.0) to Azure
Display name Azure SQL Database should have the minimal TLS version set to the highest version
Id Deny-Sql-minTLS
Version 1.1.0
Details on versioning
Category SQL
Description Setting minimal TLS version to 1.2 improves security by ensuring your Azure SQL Database can only be accessed from clients using TLS 1.2. Using versions of TLS less than 1.2 is not reccomended since they have well documented security vunerabilities.
Cloud environments AzureChinaCloud
AzureCloud
AzureUSGovernment
Mode Indexed
Type Custom Azure Landing Zones (ALZ)
Preview False
Deprecated False
Effect Default
Audit
Allowed
Audit, Disabled, Deny
RBAC role(s) none
Rule aliases IF (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Sql/servers/minimalTlsVersion Microsoft.Sql servers properties.minimalTlsVersion True True
Rule resource types IF (1)
Microsoft.Sql/servers
Initiatives usage
Rows: 1-3 / 3
Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi
?
Page of 1
Initiative DisplayName Initiative Id Initiative Category State
[Deprecated]: Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit Enforce-EncryptTransit_20240509 Encryption Deprecated
[Deprecated]: Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit Enforce-EncryptTransit Encryption Deprecated
Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit Enforce-EncryptTransit_20241211 Encryption GA
History
Date/Time (UTC ymd) (i) Change type Change detail
2024-10-10 01:17:21 change Minor (1.0.0 > 1.1.0)
JSON compare
compare mode: version left: version right:
1.0.0 → 1.1.0 RENAMED
@@ -3,9 +3,9 @@
3
  "mode": "Indexed",
4
  "displayName": "Azure SQL Database should have the minimal TLS version set to the highest version",
5
  "description": "Setting minimal TLS version to 1.2 improves security by ensuring your Azure SQL Database can only be accessed from clients using TLS 1.2. Using versions of TLS less than 1.2 is not reccomended since they have well documented security vunerabilities.",
6
  "metadata": {
7
- "version": "1.0.0",
8
  "category": "SQL",
9
  "source": "https://github.com/Azure/Enterprise-Scale/",
10
  "alzCloudEnvironments": [
11
  "AzureCloud",
@@ -55,9 +55,9 @@
55
  "exists": "false"
56
  },
57
  {
58
  "field": "Microsoft.Sql/servers/minimalTlsVersion",
59
- "notequals": "[parameters('minimalTlsVersion')]"
60
  }
61
  ]
62
  }
63
  ]
 
3
  "mode": "Indexed",
4
  "displayName": "Azure SQL Database should have the minimal TLS version set to the highest version",
5
  "description": "Setting minimal TLS version to 1.2 improves security by ensuring your Azure SQL Database can only be accessed from clients using TLS 1.2. Using versions of TLS less than 1.2 is not reccomended since they have well documented security vunerabilities.",
6
  "metadata": {
7
+ "version": "1.1.0",
8
  "category": "SQL",
9
  "source": "https://github.com/Azure/Enterprise-Scale/",
10
  "alzCloudEnvironments": [
11
  "AzureCloud",
 
55
  "exists": "false"
56
  },
57
  {
58
  "field": "Microsoft.Sql/servers/minimalTlsVersion",
59
+ "less": "[parameters('minimalTlsVersion')]"
60
  }
61
  ]
62
  }
63
  ]
JSON
EPAC
Deploy policy Deny-Sql-minTLS (1.1.0) to Azure 
{7 items}