AzPolicyAdvertizer

last sync: 2024-Sep-18 17:50:24 UTC

SQL servers deploys a specific min TLS version requirement.

Azure Landing Zones (ALZ) Policy definition

Source

Repository Azure Landing Zones (ALZ) GitHub
JSON Deploy-SQL-minTLS

Deploy policy Deploy-SQL-minTLS (1.1.0) to Azure

Display name

SQL servers deploys a specific min TLS version requirement.

Deploy-SQL-minTLS

Version

1.1.0
Details on versioning

Category

SQL

Description

Deploys a specific min TLS version requirement and enforce SSL on SQL servers. Enables secure server to client by enforce minimal Tls Version to secure the connection between your database server and your client applications helps protect against 'man in the middle' attacks by encrypting the data stream between the server and your application. This configuration enforces that SSL is always enabled for accessing your database server.

Mode

Indexed

Type

Custom Azure Landing Zones (ALZ)

Preview

False

Deprecated

False

Effect

Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled

RBAC role(s)

Role Name	Role Id
SQL Server Contributor	6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437

Rule aliases

IF (1)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.Sql/servers/minimalTlsVersion	Microsoft.Sql	servers	properties.minimalTlsVersion	True		True

THEN-ExistenceCondition (1)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.Sql/servers/minimalTlsVersion	Microsoft.Sql	servers	properties.minimalTlsVersion	True		True

Rule resource types

IF (1)
Microsoft.Sql/servers
THEN-Deployment (1)
Microsoft.Sql/servers

Initiatives usage

Initiative DisplayName	Initiative Id	Initiative Category	State
[Deprecated]: Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit	Enforce-EncryptTransit	Encryption	Deprecated
Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit	Enforce-EncryptTransit_20240509	Encryption	GA

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2023-09-27 17:59:47	change	Minor (1.0.0 > 1.1.0)

JSON compare

compare mode: version left: version right:

JSON

EPAC