turbot/steampipe-mod-azure-compliance

Control: Ensure That Microsoft Defender for Open-Source Relational Databases is set to 'On'

Description

Turning on Microsoft Defender for Open-source relational databases enables threat detection for Open-source relational databases, providing threat intelligence, anomaly detection, and behavior analytics in the Microsoft Defender for Cloud.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.securitycenter_azure_defender_on_for_opensource_relational_db

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.securitycenter_azure_defender_on_for_opensource_relational_db --share

SQL

This control uses a named query:

select
sub_pricing.id as resource,
case
when pricing_tier = 'Standard' then 'ok'
else 'alarm'
end as status,
case
when pricing_tier = 'Standard' then 'Azure Defender on for Open Source Relational Databases.'
else 'Azure Defender off for Open Source Relational Databases.'
end as reason
, sub.display_name as subscription
from
azure_security_center_subscription_pricing sub_pricing
right join azure_subscription sub on sub_pricing.subscription_id = sub.subscription_id
where
name = 'OpenSourceRelationalDatabases';

Tags