{ "name": "Deploy-MDFC-DefenderSQL-AMA", "type": "Microsoft.Authorization/policySetDefinitions", "apiVersion": "2021-06-01", "scope": null, "properties": { "policyType": "Custom", "displayName": "[Deprecated]: Configure SQL VM and Arc-enabled SQL Servers to install Microsoft Defender for SQL and AMA with a user-defined LAW", "description": "Initiative is deprecated as the built-in initiative now supports bringing your own UAMI and DCR. Superseded by https://www.azadvertizer.net/azpolicyinitiativesadvertizer/de01d381-bae9-4670-8870-786f89f49e26.html", "metadata": { "version": "1.0.1-deprecated", "category": "Security Center", "source": "https://github.com/Azure/Enterprise-Scale/", "deprecated": true, "supersededBy": "de01d381-bae9-4670-8870-786f89f49e26", "alzCloudEnvironments": [ "AzureCloud" ] }, "parameters": { "effect": { "type": "String", "metadata": { "displayName": "Effect", "description": "Enable or disable the execution of the policy" }, "allowedValues": [ "DeployIfNotExists", "Disabled" ], "defaultValue": "DeployIfNotExists" }, "workspaceRegion": { "type": "String", "metadata": { "displayName": "Workspace region", "description": "Region of the Log Analytics workspace destination for the Data Collection Rule.", "strongType": "location" } }, "dcrName": { "type": "String", "metadata": { "displayName": "Data Collection Rule Name", "description": "Name of the Data Collection Rule." } }, "dcrResourceGroup": { "type": "String", "metadata": { "displayName": "Data Collection Rule Resource Group", "description": "Resource Group of the Data Collection Rule." } }, "dcrId": { "type": "String", "metadata": { "displayName": "Data Collection Rule Id", "description": "Id of the Data Collection Rule." } }, "userWorkspaceResourceId": { "type": "String", "metadata": { "displayName": "Workspace Resource Id", "description": "Workspace resource Id of the Log Analytics workspace destination for the Data Collection Rule.", "strongType": "omsWorkspace" } }, "enableCollectionOfSqlQueriesForSecurityResearch": { "type": "Boolean", "metadata": { "displayName": "Enable collection of SQL queries for security research", "description": "Enable or disable the collection of SQL queries for security research." }, "allowedValues": [ true, false ], "defaultValue": false }, "identityResourceGroup": { "type": "String", "metadata": { "displayName": "Identity Resource Group", "description": "The name of the resource group created by the policy." }, "defaultValue": "" }, "userAssignedIdentityName": { "type": "String", "metadata": { "displayName": "User Assigned Managed Identity Name", "description": "The name of the user assigned managed identity." }, "defaultValue": "" } }, "policyDefinitions": [ { "policyDefinitionReferenceId": "defenderForSqlArcAma", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3592ff98-9787-443a-af59-4505d0fe0786", "parameters": { "effect": { "value": "[[parameters('effect')]" } }, "groupNames": [] }, { "policyDefinitionReferenceId": "defenderForSqlArcMdsql", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/65503269-6a54-4553-8a28-0065a8e6d929", "parameters": { "effect": { "value": "[[parameters('effect')]" } }, "groupNames": [] }, { "policyDefinitionReferenceId": "defenderForSqlArcMdsqlDcr", "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-MDFC-Arc-Sql-DefenderSQL-DCR", "parameters": { "effect": { "value": "[[parameters('effect')]" }, "userWorkspaceResourceId": { "value": "[[parameters('userWorkspaceResourceId')]" }, "workspaceRegion": { "value": "[[parameters('workspaceRegion')]" }, "enableCollectionOfSqlQueriesForSecurityResearch": { "value": "[[parameters('enableCollectionOfSqlQueriesForSecurityResearch')]" }, "dcrName": { "value": "[[parameters('dcrName')]" }, "dcrResourceGroup": { "value": "[[parameters('dcrResourceGroup')]" }, "dcrId": { "value": "[[parameters('dcrId')]" } }, "groupNames": [] }, { "policyDefinitionReferenceId": "defenderForSqlArcDcrAssociation", "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-MDFC-Arc-SQL-DCR-Association", "parameters": { "effect": { "value": "[[parameters('effect')]" }, "workspaceRegion": { "value": "[[parameters('workspaceRegion')]" }, "dcrName": { "value": "[[parameters('dcrName')]" }, "dcrResourceGroup": { "value": "[[parameters('dcrResourceGroup')]" }, "dcrId": { "value": "[[parameters('dcrId')]" } }, "groupNames": [] }, { "policyDefinitionReferenceId": "defenderForSqlAma", "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-MDFC-SQL-AMA", "parameters": { "effect": { "value": "[[parameters('effect')]" }, "identityResourceGroup": { "value": "[[parameters('identityResourceGroup')]" }, "userAssignedIdentityName": { "value": "[[parameters('userAssignedIdentityName')]" } }, "groupNames": [] }, { "policyDefinitionReferenceId": "defenderForSqlMdsql", "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-MDFC-SQL-DefenderSQL", "parameters": { "effect": { "value": "[[parameters('effect')]" }, "workspaceRegion": { "value": "[[parameters('workspaceRegion')]" }, "dcrResourceGroup": { "value": "[[parameters('dcrResourceGroup')]" }, "dcrName": { "value": "[[parameters('dcrName')]" }, "dcrId": { "value": "[[parameters('dcrId')]" } }, "groupNames": [] }, { "policyDefinitionReferenceId": "defenderForSqlMdsqlDcr", "policyDefinitionId": "/providers/Microsoft.Management/managementGroups/contoso/providers/Microsoft.Authorization/policyDefinitions/Deploy-MDFC-SQL-DefenderSQL-DCR", "parameters": { "effect": { "value": "Disabled" }, "userWorkspaceResourceId": { "value": "[[parameters('userWorkspaceResourceId')]" }, "workspaceRegion": { "value": "[[parameters('workspaceRegion')]" }, "enableCollectionOfSqlQueriesForSecurityResearch": { "value": "[[parameters('enableCollectionOfSqlQueriesForSecurityResearch')]" }, "dcrName": { "value": "[[parameters('dcrName')]" }, "dcrResourceGroup": { "value": "[[parameters('dcrResourceGroup')]" }, "dcrId": { "value": "[[parameters('dcrId')]" } }, "groupNames": [] } ], "policyDefinitionGroups": null } }