last sync: 2024-Sep-18 17:50:42 UTC

[Deprecated]: Configure SQL VM and Arc-enabled SQL Servers to install Microsoft Defender for SQL and AMA with a user-defined LAW

Azure Landing Zones (ALZ) Policy Initiative (PolicySet)

Source Repository Azure Landing Zones (ALZ) GitHub
JSON Deploy-MDFC-DefenderSQL-AMA
Display name[Deprecated]: Configure SQL VM and Arc-enabled SQL Servers to install Microsoft Defender for SQL and AMA with a user-defined LAW
IdDeploy-MDFC-DefenderSQL-AMA
Version1.0.1-deprecated
Details on versioning
CategorySecurity Center
DescriptionInitiative is deprecated as the built-in initiative now supports bringing your own UAMI and DCR. Superseded by https://www.azadvertizer.net/azpolicyinitiativesadvertizer/de01d381-bae9-4670-8870-786f89f49e26.html
TypeCustom Azure Landing Zones (ALZ)
DeprecatedTrue
PreviewFalse
SupersededBy This ALZ PolicySet definition is superseded by Configure SQL VMs and Arc-enabled SQL Servers to install Microsoft Defender for SQL and AMA with a user-defined LA workspace (de01d381-bae9-4670-8870-786f89f49e26) BuiltIn
More information on Azure Landing Zones deprecated Policy and PolicySet definitions
Policy count Total Policies: 7
Builtin Policies: 2
Static Policies: 0
ALZ Policies: 5
Policy used
Policy DisplayName Policy Id Category Effect Roles# Roles State Type
[Deprecated]: Configure Arc-enabled SQL Servers to auto install Microsoft Defender for SQL and DCR with a user-defined LAW Deploy-MDFC-Arc-Sql-DefenderSQL-DCR Security Center Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
1 Contributor Deprecated ALZ
[Deprecated]: Configure Arc-enabled SQL Servers with DCR Association to Microsoft Defender for SQL user-defined DCR Deploy-MDFC-Arc-SQL-DCR-Association Security Center Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
2 Log Analytics Contributor, Monitoring Contributor Deprecated ALZ
[Deprecated]: Configure SQL Virtual Machines to auto install Microsoft Defender for SQL and DCR with a user-defined LAW Deploy-MDFC-SQL-DefenderSQL-DCR Security Center Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
1 Contributor Deprecated ALZ
[Deprecated]: Configure SQL Virtual Machines to automatically install Azure Monitor Agent Deploy-MDFC-SQL-AMA Security Center Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
1 Virtual Machine Contributor Deprecated ALZ
[Deprecated]: Configure SQL Virtual Machines to automatically install Microsoft Defender for SQL Deploy-MDFC-SQL-DefenderSQL Security Center Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
2 Log Analytics Contributor, Monitoring Contributor Deprecated ALZ
Configure Arc-enabled SQL Servers to automatically install Azure Monitor Agent 3592ff98-9787-443a-af59-4505d0fe0786 Security Center Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
1 Azure Connected Machine Resource Administrator GA BuiltIn
Configure Arc-enabled SQL Servers to automatically install Microsoft Defender for SQL 65503269-6a54-4553-8a28-0065a8e6d929 Security Center Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
1 Log Analytics Contributor GA BuiltIn
Roles used
History none
JSON compare
compare mode: version left: version right:
JSON
EPAC