Azure ResourceType insights

4 Policy definitions
if:4
then.deployment:0
then.details:0
then.existenceCondition:0
then.operations:0

2017-01-01
2017-06-01
2020-01-01
2021-03-01
2021-05-01
2022-09-01
2022-12-01

20 unique RBAC roles
action:5
delete:6
read:20
write:6

count:3

• Domain Controller Services appId:443155a6-77f3-45e3-882b-22b3a8d431fb
• Domain Controller Services appId:abba844e-bc0e-44b0-947a-dc74e5d09022
• Domain Controller Services appId:d87dcbc6-a371-462e-88e3-28ad15ec4e64

DomainServices

Domain Service Type

count:7

4 Policy definitions
if:4
then.deployment:0
then.details:0
then.existenceCondition:0
then.operations:0

Azure Active Directory Domain Service

19 unique RBAC roles
delete:5
read:19
write:5

log-categories

metrics

Unknown

True

count:44 physical:44 logical:0

australiaeast, australiasoutheast, brazilsouth, canadacentral, canadaeast, centralindia, centralus, eastasia, eastus, eastus2, francecentral, germanynorth, germanywestcentral, israelcentral, italynorth, japaneast, japanwest, koreacentral, koreasouth, mexicocentral, newzealandnorth, northcentralus, northeurope, norwayeast, polandcentral, qatarcentral, southafricanorth, southcentralus, southeastasia, southindia, spaincentral, swedencentral, switzerlandnorth, switzerlandwest, uaecentral, uaenorth, uksouth, ukwest, westcentralus, westeurope, westindia, westus, westus2, westus3

count:56 physical:16 logical:40

asia, asiapacific, australia, australiacentral, australiacentral2, brazil, brazilsoutheast, brazilus, canada, centraluseuap, centralusstage, chilecentral, eastasiastage, eastus2euap, eastus2stage, eastusstage, eastusstg, europe, france, francesouth, germany, global, india, indonesia, indonesiacentral, israel, italy, japan, jioindiacentral, jioindiawest, korea, malaysia, malaysiawest, mexico, newzealand, northcentralusstage, norway, norwaywest, poland, qatar, singapore, southafrica, southafricawest, southcentralusstage, southcentralusstg, southeastasiastage, spain, sweden, switzerland, taiwan, uae, uk, unitedstates, unitedstateseuap, westus2stage, westusstage

APRLv2 recommendations: 2

• HighAvailability [High] Use at least the Enterprise SKU
• HighAvailability [High] Use replica sets for resiliency or geolocation in Microsoft Entra Domain Services

PSRule for Azure rules: 3

• Security [Critical] Disable NTLM v1
• Security [Critical] Disable RC4 encryption
• Security [Critical] Disable TLS v1

Azure Active Directory Domain Service
(wip)

count:7

latest
2017-01-01
2017-06-01
2020-01-01
2021-03-01
2021-05-01
2022-09-01
2022-12-01

count:7

latest
2017-01-01
2017-06-01
2020-01-01
2021-03-01
2021-05-01
2022-09-01
2022-12-01

count:7

latest
2017-01-01
2017-06-01
2020-01-01
2021-03-01
2021-05-01
2022-09-01
2022-12-01

count:3

•active_directory_domain_service_replica_set
•active_directory_domain_service_trust
•active_directory_domain_service

count:1

•aad/domainservice

count:3

•active_directory_domain_service_replica_set
•active_directory_domain_service_trust
•active_directory_domain_service

count:7

2017-01-01
2017-06-01
2020-01-01
2021-03-01
2021-05-01
2022-09-01
2022-12-01

2021-05-01

Microsoft.AAD

Domain Services Resource Provider

4 Policy definitions
if:4
then.deployment:0
then.details:0
then.existenceCondition:0
then.operations:0

2017-06-01
2020-01-01
2021-03-01
2021-05-01
2022-09-01
2022-12-01

20 unique RBAC roles
action:5
delete:6
read:20
write:6

count:3

DomainServices/oucontainer

Ou Container Type

count:6

latest
2017-06-01
2020-01-01
2021-03-01
2021-05-01
2022-09-01
2022-12-01

20 unique RBAC roles
delete:6
read:20
write:6

Unknown

count:44 physical:44 logical:0

count:56 physical:16 logical:40

count:6

count:6

latest
2017-06-01
2020-01-01
2021-03-01
2021-05-01
2022-09-01
2022-12-01

count:6

latest
2017-06-01
2020-01-01
2021-03-01
2021-05-01
2022-09-01
2022-12-01

count:1

•aad/oucontainer

count:6

2017-06-01
2020-01-01
2021-03-01
2021-05-01
2022-09-01
2022-12-01

2021-05-01

Microsoft.AAD

Domain Services Resource Provider

4 Policy definitions
if:4
then.deployment:0
then.details:0
then.existenceCondition:0
then.operations:0

20 unique RBAC roles
action:5
delete:6
read:20
write:6

count:3

domainServices/OutboundNetworkDependenciesEndpoints

Domain Service Type

20 unique RBAC roles
read:20

Unknown

undetermined

Microsoft.AAD

Domain Services Resource Provider

4 Policy definitions
if:4
then.deployment:0
then.details:0
then.existenceCondition:0
then.operations:0

20 unique RBAC roles
action:5
delete:6
read:20
write:6

count:3

domainServices/providers/Microsoft.Insights/diagnosticSettings

Domain Service Type

20 unique RBAC roles
read:20
write:5

Unknown

undetermined

Microsoft.AAD

Domain Services Resource Provider

4 Policy definitions
if:4
then.deployment:0
then.details:0
then.existenceCondition:0
then.operations:0

20 unique RBAC roles
action:5
delete:6
read:20
write:6

count:3

domainServices/providers/Microsoft.Insights/logDefinitions

Domain Service Type

20 unique RBAC roles
read:20

Unknown

undetermined

Microsoft.AAD

Domain Services Resource Provider

4 Policy definitions
if:4
then.deployment:0
then.details:0
then.existenceCondition:0
then.operations:0

20 unique RBAC roles
action:5
delete:6
read:20
write:6

count:3

domainServices/providers/Microsoft.Insights/metricDefinitions

Domain Service Type

20 unique RBAC roles
read:20

Unknown

undetermined

Microsoft.AAD

Domain Services Resource Provider

4 Policy definitions
if:4
then.deployment:0
then.details:0
then.existenceCondition:0
then.operations:0

20 unique RBAC roles
action:5
delete:6
read:20
write:6

count:3

locations

n/a

Unknown

count:44 physical:44 logical:0

count:56 physical:16 logical:40

count:7

2017-01-01
2017-06-01
2020-01-01
2021-03-01
2021-05-01
2022-09-01
2022-12-01

2021-05-01

Microsoft.AAD

Domain Services Resource Provider

4 Policy definitions
if:4
then.deployment:0
then.details:0
then.existenceCondition:0
then.operations:0

20 unique RBAC roles
action:5
delete:6
read:20
write:6

count:3

locations/operationresults

n/a

18 unique RBAC roles
read:18

Unknown

count:44 physical:44 logical:0

count:56 physical:16 logical:40

count:7

2017-01-01
2017-06-01
2020-01-01
2021-03-01
2021-05-01
2022-09-01
2022-12-01

2021-05-01

Microsoft.AAD

Domain Services Resource Provider

4 Policy definitions
if:4
then.deployment:0
then.details:0
then.existenceCondition:0
then.operations:0

20 unique RBAC roles
action:5
delete:6
read:20
write:6

count:3

operations

n/a

18 unique RBAC roles
read:18

Unknown

count:44 physical:44 logical:0

count:56 physical:16 logical:40

count:7

2017-01-01
2017-06-01
2020-01-01
2021-03-01
2021-05-01
2022-09-01
2022-12-01

2021-05-01

Microsoft.AadCustomSecurityAttributesDiagnosticSettings

Microsoft Monitoring Insights

17 unique RBAC roles
delete:4
read:17
write:4

diagnosticSettings

Diagnostic settings

17 unique RBAC roles
delete:4
read:17
write:4

Unknown

count:1

2017-04-01-preview

Microsoft.AadCustomSecurityAttributesDiagnosticSettings

Microsoft Monitoring Insights

17 unique RBAC roles
delete:4
read:17
write:4

diagnosticSettingsCategories

Diagnostic settings categories

17 unique RBAC roles
read:17

Unknown

count:1

2017-04-01-preview

Microsoft.DBforMariaDB

Microsoft DB for MariaDB

11 Policy definitions
if:11
then.deployment:1
then.details:0
then.existenceCondition:0
then.operations:0

17 unique RBAC roles
action:4
delete:4
read:17
write:4

count:2

• Azure OSSRDBMS Database appId:123cd850-d9df-40bd-94d5-c9f07b7fa203
• Azure SQL Virtual Network to Network Resource Provider appId:76cd24bf-a9fc-4344-b1dc-908275de6d6d

servers/administrators

Administrator of MariaDB server.

17 unique RBAC roles
delete:4
read:17
write:4

Unknown

undetermined

Microsoft.DBforMariaDB

Microsoft DB for MariaDB

11 Policy definitions
if:11
then.deployment:1
then.details:0
then.existenceCondition:0
then.operations:0

17 unique RBAC roles
action:4
delete:4
read:17
write:4

count:2

• Azure OSSRDBMS Database appId:123cd850-d9df-40bd-94d5-c9f07b7fa203
• Azure SQL Virtual Network to Network Resource Provider appId:76cd24bf-a9fc-4344-b1dc-908275de6d6d

servers/advisors

Advisors

17 unique RBAC roles
action:4
read:17

Unknown

count:38 physical:38 logical:0

australiacentral, australiacentral2, australiaeast, australiasoutheast, brazilsouth, canadacentral, canadaeast, centralindia, centralus, eastasia, eastus, eastus2, francecentral, francesouth, germanywestcentral, japaneast, japanwest, koreacentral, koreasouth, northcentralus, northeurope, norwayeast, southafricanorth, southafricawest, southcentralus, southeastasia, southindia, swedencentral, switzerlandnorth, uaenorth, uksouth, ukwest, westcentralus, westeurope, westindia, westus, westus2, westus3

count:62 physical:22 logical:40

asia, asiapacific, australia, brazil, brazilsoutheast, brazilus, canada, centraluseuap, centralusstage, chilecentral, eastasiastage, eastus2euap, eastus2stage, eastusstage, eastusstg, europe, france, germany, germanynorth, global, india, indonesia, indonesiacentral, israel, israelcentral, italy, italynorth, japan, jioindiacentral, jioindiawest, korea, malaysia, malaysiawest, mexico, mexicocentral, newzealand, newzealandnorth, northcentralusstage, norway, norwaywest, poland, polandcentral, qatar, qatarcentral, singapore, southafrica, southcentralusstage, southcentralusstg, southeastasiastage, spain, spaincentral, sweden, switzerland, switzerlandwest, taiwan, uae, uaecentral, uk, unitedstates, unitedstateseuap, westus2stage, westusstage

count:1

count:1

count:1

count:3

2018-06-01
2018-06-01-preview
2018-06-01-privatepreview

Microsoft.DBforMariaDB

Microsoft DB for MariaDB

11 Policy definitions
if:11
then.deployment:1
then.details:0
then.existenceCondition:0
then.operations:0

17 unique RBAC roles
action:4
delete:4
read:17
write:4

count:2

• Azure OSSRDBMS Database appId:123cd850-d9df-40bd-94d5-c9f07b7fa203
• Azure SQL Virtual Network to Network Resource Provider appId:76cd24bf-a9fc-4344-b1dc-908275de6d6d

servers/advisors/recommendedActions

Recommended Actions

17 unique RBAC roles
read:17

Unknown

undetermined

count:1

count:1

count:1

Microsoft.DBforMariaDB

Microsoft DB for MariaDB

11 Policy definitions
if:11
then.deployment:1
then.details:0
then.existenceCondition:0
then.operations:0

2018-06-01
2018-06-01-preview

17 unique RBAC roles
action:4
delete:4
read:17
write:4

count:2

• Azure OSSRDBMS Database appId:123cd850-d9df-40bd-94d5-c9f07b7fa203
• Azure SQL Virtual Network to Network Resource Provider appId:76cd24bf-a9fc-4344-b1dc-908275de6d6d

servers/configurations

Configurations

count:2

17 unique RBAC roles
read:17
write:4

Unknown

count:38 physical:38 logical:0

count:62 physical:22 logical:40

count:2

count:2

count:2

count:1

•dbformariadb/configuration

count:2

2018-06-01
2018-06-01-preview

Microsoft.DBforMariaDB

Microsoft DB for MariaDB

11 Policy definitions
if:11
then.deployment:1
then.details:0
then.existenceCondition:0
then.operations:0

2018-06-01
2018-06-01-preview

17 unique RBAC roles
action:4
delete:4
read:17
write:4

count:2

• Azure OSSRDBMS Database appId:123cd850-d9df-40bd-94d5-c9f07b7fa203
• Azure SQL Virtual Network to Network Resource Provider appId:76cd24bf-a9fc-4344-b1dc-908275de6d6d

servers/databases

MariaDB Databases

count:2

17 unique RBAC roles
delete:4
read:17
write:4

Unknown

count:38 physical:38 logical:0

count:62 physical:22 logical:40

PSRule for Azure rules: 1

• Operational Excellence [Awareness] Use valid database names

count:1

{
    "ShortName": "mdbdb",
    "scope": "servers",
    "lengthMin": "1",
    "lengthMax": "63",
    "validText": "Alphanumerics and hyphens.",
    "invalidText": "",
    "invalidCharacters": "",
    "invalidCharactersStart": "",
    "invalidCharactersEnd": "",
    "invalidCharactersConsecutive": "",
    "regx": "^[a-zA-Z0-9-]{1,63}$",
    "staticValues": ""
}

regex may be escaped

count:2

count:2

count:2

count:1

•dbformariadb/database

count:2

2018-06-01
2018-06-01-preview

Microsoft.DBforMariaDB

Microsoft DB for MariaDB

11 Policy definitions
if:11
then.deployment:1
then.details:0
then.existenceCondition:0
then.operations:0

2018-06-01
2018-06-01-preview

17 unique RBAC roles
action:4
delete:4
read:17
write:4

count:2

• Azure OSSRDBMS Database appId:123cd850-d9df-40bd-94d5-c9f07b7fa203
• Azure SQL Virtual Network to Network Resource Provider appId:76cd24bf-a9fc-4344-b1dc-908275de6d6d

servers/firewallRules

Firewall Rules

count:2

17 unique RBAC roles
delete:4
read:17
write:4

Unknown

count:38 physical:38 logical:0

count:62 physical:22 logical:40

PSRule for Azure rules: 4

• Security [Important] Disable MariaDB Allow access to Azure services firewall rule
• Security [Important] Review Azure MariaDB server firewall permitted public IP addresses
• Security [Awareness] Review Azure MariaDB server firewall rules
• Operational Excellence [Awareness] Use valid firewall rule names

count:1

{
    "ShortName": "rule",
    "scope": "servers",
    "lengthMin": "1",
    "lengthMax": "128",
    "validText": "Alphanumerics, hyphens, and underscores.",
    "invalidText": "",
    "invalidCharacters": "",
    "invalidCharactersStart": "",
    "invalidCharactersEnd": "",
    "invalidCharactersConsecutive": "",
    "regx": "^[a-zA-Z0-9_-]{1,128}$",
    "staticValues": ""
}

regex may be escaped

count:2

count:2

count:2

count:1

•dbformariadb/firewallrule

count:2

2018-06-01
2018-06-01-preview

Microsoft.DBforMariaDB

Microsoft DB for MariaDB

11 Policy definitions
if:11
then.deployment:1
then.details:0
then.existenceCondition:0
then.operations:0

17 unique RBAC roles
action:4
delete:4
read:17
write:4

count:2

• Azure OSSRDBMS Database appId:123cd850-d9df-40bd-94d5-c9f07b7fa203
• Azure SQL Virtual Network to Network Resource Provider appId:76cd24bf-a9fc-4344-b1dc-908275de6d6d

servers/keys

Azure Database for MariaDB Server Keys

17 unique RBAC roles
delete:4
read:17
write:4

Unknown

count:47 physical:47 logical:0

australiacentral, australiacentral2, australiaeast, australiasoutheast, brazilsouth, brazilsoutheast, canadacentral, canadaeast, centralindia, centralus, centraluseuap, eastasia, eastus, eastus2, eastus2euap, francecentral, francesouth, germanynorth, germanywestcentral, japaneast, japanwest, jioindiacentral, jioindiawest, koreacentral, koreasouth, northcentralus, northeurope, norwayeast, norwaywest, southafricanorth, southafricawest, southcentralus, southeastasia, southindia, swedencentral, switzerlandnorth, switzerlandwest, uaecentral, uaenorth, uksouth, ukwest, westcentralus, westeurope, westindia, westus, westus2, westus3

count:53 physical:13 logical:40

asia, asiapacific, australia, brazil, brazilus, canada, centralusstage, chilecentral, eastasiastage, eastus2stage, eastusstage, eastusstg, europe, france, germany, global, india, indonesia, indonesiacentral, israel, israelcentral, italy, italynorth, japan, korea, malaysia, malaysiawest, mexico, mexicocentral, newzealand, newzealandnorth, northcentralusstage, norway, poland, polandcentral, qatar, qatarcentral, singapore, southafrica, southcentralusstage, southcentralusstg, southeastasiastage, spain, spaincentral, sweden, switzerland, taiwan, uae, uk, unitedstates, unitedstateseuap, westus2stage, westusstage

count:3

2020-01-01
2020-01-01-preview
2020-01-01-privatepreview

Microsoft.DBforMariaDB

Microsoft DB for MariaDB

11 Policy definitions
if:11
then.deployment:1
then.details:0
then.existenceCondition:0
then.operations:0

17 unique RBAC roles
action:4
delete:4
read:17
write:4

count:2

• Azure OSSRDBMS Database appId:123cd850-d9df-40bd-94d5-c9f07b7fa203
• Azure SQL Virtual Network to Network Resource Provider appId:76cd24bf-a9fc-4344-b1dc-908275de6d6d

servers/logFiles

MariaDB LogFiles

17 unique RBAC roles
read:17

Unknown

undetermined

Microsoft.DBforMariaDB

Microsoft DB for MariaDB

11 Policy definitions
if:11
then.deployment:1
then.details:0
then.existenceCondition:0
then.operations:0

17 unique RBAC roles
action:4
delete:4
read:17
write:4

count:2

• Azure OSSRDBMS Database appId:123cd850-d9df-40bd-94d5-c9f07b7fa203
• Azure SQL Virtual Network to Network Resource Provider appId:76cd24bf-a9fc-4344-b1dc-908275de6d6d

servers/performanceTiers

Performance Tiers

17 unique RBAC roles
read:17

Unknown

undetermined

Microsoft.DBforMariaDB

Microsoft DB for MariaDB

11 Policy definitions
if:11
then.deployment:1
then.details:0
then.existenceCondition:0
then.operations:0

17 unique RBAC roles
action:4
delete:4
read:17
write:4

count:2

• Azure OSSRDBMS Database appId:123cd850-d9df-40bd-94d5-c9f07b7fa203
• Azure SQL Virtual Network to Network Resource Provider appId:76cd24bf-a9fc-4344-b1dc-908275de6d6d

servers/privateEndpointConnectionProxies

Azure Database for MariaDB Private Endpoint Connection Proxy

17 unique RBAC roles
action:4
delete:4
read:17
write:4

Unknown

count:38 physical:38 logical:0

count:62 physical:22 logical:40

count:3

2018-06-01
2018-06-01-preview
2018-06-01-privatepreview

Microsoft.DBforMariaDB

Microsoft DB for MariaDB

11 Policy definitions
if:11
then.deployment:1
then.details:0
then.existenceCondition:0
then.operations:0

17 unique RBAC roles
action:4
delete:4
read:17
write:4

count:2

• Azure OSSRDBMS Database appId:123cd850-d9df-40bd-94d5-c9f07b7fa203
• Azure SQL Virtual Network to Network Resource Provider appId:76cd24bf-a9fc-4344-b1dc-908275de6d6d

servers/privateEndpointConnections

Azure Database for MariaDB private endpoint connection

count:1

2018-06-01