server_blob_auditing_policies

Creates, updates, deletes, gets or lists a server_blob_auditing_policies resource.

Overview

Name	server_blob_auditing_policies
Type	Resource
Id	azure.sql.server_blob_auditing_policies

Fields

vw_server_blob_auditing_policies

Name	Datatype	Description
audit_actions_and_groups	text	field from the properties object
blobAuditingPolicyName	text	field from the properties object
is_azure_monitor_target_enabled	text	field from the properties object
is_devops_audit_enabled	text	field from the properties object
is_managed_identity_in_use	text	field from the properties object
is_storage_secondary_key_in_use	text	field from the properties object
queue_delay_ms	text	field from the properties object
resourceGroupName	text	field from the properties object
retention_days	text	field from the properties object
serverName	text	field from the properties object
state	text	field from the properties object
storage_account_access_key	text	field from the properties object
storage_account_subscription_id	text	field from the properties object
storage_endpoint	text	field from the properties object
subscriptionId	text	field from the properties object

server_blob_auditing_policies

Name	Datatype	Description
properties	object	Properties of a server blob auditing policy.

Methods

Name	Accessible by	Required Params	Description
get	SELECT	blobAuditingPolicyName, resourceGroupName, serverName, subscriptionId	Gets a server's blob auditing policy.
list_by_server	SELECT	resourceGroupName, serverName, subscriptionId	Lists auditing settings of a server.
create_or_update	INSERT	blobAuditingPolicyName, resourceGroupName, serverName, subscriptionId	Creates or updates a server's blob auditing policy.

SELECT examples

Lists auditing settings of a server.

vw_server_blob_auditing_policies

SELECT
audit_actions_and_groups,
blobAuditingPolicyName,
is_azure_monitor_target_enabled,
is_devops_audit_enabled,
is_managed_identity_in_use,
is_storage_secondary_key_in_use,
queue_delay_ms,
resourceGroupName,
retention_days,
serverName,
state,
storage_account_access_key,
storage_account_subscription_id,
storage_endpoint,
subscriptionId
FROM azure.sql.vw_server_blob_auditing_policies
WHERE resourceGroupName = '{{ resourceGroupName }}'
AND serverName = '{{ serverName }}'
AND subscriptionId = '{{ subscriptionId }}';

server_blob_auditing_policies

SELECT
properties
FROM azure.sql.server_blob_auditing_policies
WHERE resourceGroupName = '{{ resourceGroupName }}'
AND serverName = '{{ serverName }}'
AND subscriptionId = '{{ subscriptionId }}';

INSERT example

Use the following StackQL query and manifest file to create a new server_blob_auditing_policies resource.

All Properties

/*+ create */
INSERT INTO azure.sql.server_blob_auditing_policies (
blobAuditingPolicyName,
resourceGroupName,
serverName,
subscriptionId,
properties
)
SELECT 
'{{ blobAuditingPolicyName }}',
'{{ resourceGroupName }}',
'{{ serverName }}',
'{{ subscriptionId }}',
'{{ properties }}'
;

Manifest

- name: your_resource_model_name
  props:
    - name: properties
      value:
        - name: isDevopsAuditEnabled
          value: boolean
        - name: retentionDays
          value: integer
        - name: auditActionsAndGroups
          value:
            - string
        - name: isStorageSecondaryKeyInUse
          value: boolean
        - name: isAzureMonitorTargetEnabled
          value: boolean
        - name: queueDelayMs
          value: integer
        - name: isManagedIdentityInUse
          value: boolean
        - name: state
          value: string
        - name: storageEndpoint
          value: string
        - name: storageAccountAccessKey
          value: string
        - name: storageAccountSubscriptionId
          value: string