extended_database_blob_auditing_policies

Creates, updates, deletes, gets or lists a extended_database_blob_auditing_policies resource.

Overview

Name	extended_database_blob_auditing_policies
Type	Resource
Id	azure.sql.extended_database_blob_auditing_policies

Fields

vw_extended_database_blob_auditing_policies

Name	Datatype	Description
audit_actions_and_groups	text	field from the properties object
blobAuditingPolicyName	text	field from the properties object
databaseName	text	field from the properties object
is_azure_monitor_target_enabled	text	field from the properties object
is_managed_identity_in_use	text	field from the properties object
is_storage_secondary_key_in_use	text	field from the properties object
predicate_expression	text	field from the properties object
queue_delay_ms	text	field from the properties object
resourceGroupName	text	field from the properties object
retention_days	text	field from the properties object
serverName	text	field from the properties object
state	text	field from the properties object
storage_account_access_key	text	field from the properties object
storage_account_subscription_id	text	field from the properties object
storage_endpoint	text	field from the properties object
subscriptionId	text	field from the properties object

extended_database_blob_auditing_policies

Name	Datatype	Description
properties	object	Properties of an extended database blob auditing policy.

Methods

Name	Accessible by	Required Params	Description
get	SELECT	blobAuditingPolicyName, databaseName, resourceGroupName, serverName, subscriptionId	Gets an extended database's blob auditing policy.
list_by_database	SELECT	databaseName, resourceGroupName, serverName, subscriptionId	Lists extended auditing settings of a database.
create_or_update	INSERT	blobAuditingPolicyName, databaseName, resourceGroupName, serverName, subscriptionId	Creates or updates an extended database's blob auditing policy.

SELECT examples

Lists extended auditing settings of a database.

vw_extended_database_blob_auditing_policies

SELECT
audit_actions_and_groups,
blobAuditingPolicyName,
databaseName,
is_azure_monitor_target_enabled,
is_managed_identity_in_use,
is_storage_secondary_key_in_use,
predicate_expression,
queue_delay_ms,
resourceGroupName,
retention_days,
serverName,
state,
storage_account_access_key,
storage_account_subscription_id,
storage_endpoint,
subscriptionId
FROM azure.sql.vw_extended_database_blob_auditing_policies
WHERE databaseName = '{{ databaseName }}'
AND resourceGroupName = '{{ resourceGroupName }}'
AND serverName = '{{ serverName }}'
AND subscriptionId = '{{ subscriptionId }}';

extended_database_blob_auditing_policies

SELECT
properties
FROM azure.sql.extended_database_blob_auditing_policies
WHERE databaseName = '{{ databaseName }}'
AND resourceGroupName = '{{ resourceGroupName }}'
AND serverName = '{{ serverName }}'
AND subscriptionId = '{{ subscriptionId }}';

INSERT example

Use the following StackQL query and manifest file to create a new extended_database_blob_auditing_policies resource.

All Properties

/*+ create */
INSERT INTO azure.sql.extended_database_blob_auditing_policies (
blobAuditingPolicyName,
databaseName,
resourceGroupName,
serverName,
subscriptionId,
properties
)
SELECT 
'{{ blobAuditingPolicyName }}',
'{{ databaseName }}',
'{{ resourceGroupName }}',
'{{ serverName }}',
'{{ subscriptionId }}',
'{{ properties }}'
;

Manifest

- name: your_resource_model_name
  props:
    - name: properties
      value:
        - name: predicateExpression
          value: string
        - name: retentionDays
          value: integer
        - name: auditActionsAndGroups
          value:
            - string
        - name: isStorageSecondaryKeyInUse
          value: boolean
        - name: isAzureMonitorTargetEnabled
          value: boolean
        - name: queueDelayMs
          value: integer
        - name: isManagedIdentityInUse
          value: boolean
        - name: state
          value: string
        - name: storageEndpoint
          value: string
        - name: storageAccountAccessKey
          value: string
        - name: storageAccountSubscriptionId
          value: string