azure-sql v5.15.0 - Controls and Actions now use latest Azure SDK versions to discover and manage SQL resources in Guardrails

Oct 17, 2024
Mods

What's new?

  • We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage SQL resources in Guardrails. This release includes breaking changes in the CMDB data for server, database, and elasticpool. We recommend updating your existing policy settings to refer to the updated attributes as mentioned below:

Renamed:

  • transparentDataEncryption.status to transparentDataEncryption.state
  • databaseThreatDetectionPolicy to databaseSecurityAlertPolicy

Added:

Azure SQL > Server

  • Added administrators block
  • isManagedIdentityInUse
  • autoRotationEnabled
  • externalGovernanceStatus
  • minimalTlsVersion
  • privateEndpointConnections
  • publicNetworkAccess
  • restrictOutboundNetworkAccess
  • serverAzureADAdministrator.azureADOnlyAuthentication

Azure SQL > Database

  • availabilityZone
  • currentBackupStorageRedundancy
  • databaseSecurityAlertPolicy. creationTime
  • transparentDataEncryption.location
  • isInfraEncryptionEnabled
  • isLedgerOn
  • maintenanceConfigurationId
  • requestedBackupStorageRedundancy
  • maintenanceConfigurationId

Azure SQL > ElasticPool

  • maintenanceConfigurationId

Modified:

  • The value of the attribute serverAzureADAdministrator.name has been changed from string (activeDirectory) to string (ActiveDirectory).
  • The data type of the attribute databaseThreatDetectionPolicy.disabledAlerts has been changed from string ("") to object ([]).
  • The data type of the attribute databaseThreatDetectionPolicy.emailAddresses has been changed from string ("") to object ([]).
  • The data type of the attribute databaseThreatDetectionPolicy.emailAccountAdmins has been changed from string (Disabled/Enabled) to boolean (false/true).
  • The data type of the attribute disabledAlerts has been changed from string ("") to object ([]).

Removed:

  • databaseThreatDetectionPolicy.useServerDefault

Bug fixes

  • Improved descriptions for various resource types to ensure they are clearer and more helpful.