What's new?
- We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage SQL resources in Guardrails. This release includes breaking changes in the CMDB data for server, database, and elasticpool. We recommend updating your existing policy settings to refer to the updated attributes as mentioned below:
Renamed:
transparentDataEncryption.status
totransparentDataEncryption.state
databaseThreatDetectionPolicy
todatabaseSecurityAlertPolicy
Added:
Azure SQL > Server
- Added
administrators
block isManagedIdentityInUse
autoRotationEnabled
externalGovernanceStatus
minimalTlsVersion
privateEndpointConnections
publicNetworkAccess
restrictOutboundNetworkAccess
serverAzureADAdministrator.azureADOnlyAuthentication
Azure SQL > Database
availabilityZone
currentBackupStorageRedundancy
databaseSecurityAlertPolicy. creationTime
transparentDataEncryption.location
isInfraEncryptionEnabled
isLedgerOn
maintenanceConfigurationId
requestedBackupStorageRedundancy
maintenanceConfigurationId
Azure SQL > ElasticPool
maintenanceConfigurationId
Modified:
- The value of the attribute
serverAzureADAdministrator.name
has been changed from string (activeDirectory
) to string (ActiveDirectory
). - The data type of the attribute
databaseThreatDetectionPolicy.disabledAlerts
has been changed from string (""
) to object ([]
). - The data type of the attribute
databaseThreatDetectionPolicy.emailAddresses
has been changed from string (""
) to object ([]
). - The data type of the attribute
databaseThreatDetectionPolicy.emailAccountAdmins
has been changed from string (Disabled/Enabled
) to boolean (false/true
). - The data type of the attribute
disabledAlerts
has been changed from string (""
) to object ([]
).
Removed:
databaseThreatDetectionPolicy.useServerDefault
Bug fixes
- Improved descriptions for various resource types to ensure they are clearer and more helpful.