apimanagement_service_with_virtual_network application_gateway_waf_enabled appservice_authentication_enabled appservice_azure_defender_enabled appservice_environment_internal_encryption_enabled appservice_ftp_deployment_disabled appservice_function_app_client_certificates_on appservice_function_app_cors_no_star appservice_function_app_ftps_enabled appservice_function_app_latest_http_version appservice_function_app_latest_java_version appservice_function_app_latest_python_version appservice_function_app_latest_tls_version appservice_function_app_only_https_accessible appservice_function_app_uses_managed_identity appservice_web_app_client_certificates_on appservice_web_app_cors_no_star appservice_web_app_diagnostic_logs_enabled appservice_web_app_ftps_enabled appservice_web_app_incoming_client_cert_on appservice_web_app_latest_http_version appservice_web_app_latest_java_version appservice_web_app_latest_php_version appservice_web_app_latest_python_version appservice_web_app_latest_tls_version appservice_web_app_register_with_active_directory_enabled appservice_web_app_remote_debugging_disabled appservice_web_app_use_https appservice_web_app_use_virtual_service_endpoint appservice_web_app_uses_managed_identity azure_redis_cache_in_virtual_network azure_redis_cache_ssl_enabled batch_account_encrypted_with_cmk batch_account_logging_enabled cognitive_account_encrypted_with_cmk cognitive_account_public_network_access_disabled cognitive_account_restrict_public_access cognitive_service_local_auth_disabled compute_vm_and_scale_set_encryption_at_host_enabled compute_vm_guest_configuration_installed compute_vm_guest_configuration_installed_linux compute_vm_guest_configuration_installed_windows compute_vm_malware_agent_installed compute_vm_system_updates_installed compute_vm_uses_azure_resource_manager compute_vm_utilizing_managed_disk container_registry_azure_defender_enabled container_registry_encrypted_with_cmk container_registry_restrict_public_access container_registry_use_virtual_service_endpoint cosmosdb_account_encryption_at_rest_using_cmk cosmosdb_account_with_firewall_rules cosmosdb_use_virtual_service_endpoint data_factory_encrypted_with_cmk datalake_store_account_encryption_enabled dns_azure_defender_enabled eventhub_namespace_cmk_encryption_enabled eventhub_namespace_use_virtual_service_endpoint frontdoor_waf_enabled healthcare_fhir_azure_api_encrypted_at_rest_with_cmk healthcare_fhir_public_network_access_enabled iot_hub_logging_enabled keyvault_azure_defender_enabled keyvault_key_expiration_set keyvault_logging_enabled keyvault_managed_hms_logging_enabled keyvault_managed_hms_purge_protection_enabled keyvault_purge_protection_enabled keyvault_secret_expiration_set keyvault_vault_public_network_access_disabled keyvault_vault_use_virtual_service_endpoint kubernetes_azure_defender_enabled kubernetes_cluster_add_on_azure_policy_enabled kubernetes_cluster_authorized_ip_range_defined kubernetes_cluster_os_and_data_disks_encrypted_with_cmk kubernetes_cluster_temp_disks_and_agent_node_pool_cache_encrypted_at_host kubernetes_instance_rbac_enabled kusto_cluster_disk_encryption_enabled kusto_cluster_double_encryption_enabled kusto_cluster_encrypted_at_rest_with_cmk logic_app_workflow_logging_enabled machine_learning_workspace_encrypted_with_cmk mariadb_server_geo_redundant_backup_enabled mariadb_server_public_network_access_disabled monitor_log_profile_enabled_for_all_categories monitor_log_profile_enabled_for_all_regions monitor_logs_storage_container_not_public_accessible mysql_db_server_geo_redundant_backup_enabled mysql_server_encrypted_at_rest_using_cmk mysql_server_infrastructure_encryption_enabled mysql_server_public_network_access_disabled mysql_ssl_enabled network_interface_ip_forwarding_disabled network_security_group_not_configured_gateway_subnets network_security_group_subnet_associated postgres_db_server_connection_throttling_on postgres_db_server_geo_redundant_backup_enabled postgres_db_server_log_checkpoints_on postgres_db_server_log_connections_on postgres_db_server_log_disconnections_on postgres_db_server_log_retention_days_3 postgres_sql_server_encrypted_at_rest_using_cmk postgres_sql_ssl_enabled postgresql_server_infrastructure_encryption_enabled postgresql_server_public_network_access_disabled resource_manager_azure_defender_enabled search_service_public_network_access_disabled search_service_uses_sku_supporting_private_link securitycenter_automatic_provisioning_monitoring_agent_on securitycenter_azure_defender_on_for_appservice securitycenter_azure_defender_on_for_containerregistry securitycenter_azure_defender_on_for_k8s securitycenter_azure_defender_on_for_keyvault securitycenter_azure_defender_on_for_server securitycenter_azure_defender_on_for_sqldb securitycenter_azure_defender_on_for_sqlservervm securitycenter_azure_defender_on_for_storage securitycenter_email_configured securitycenter_notify_alerts_configured securitycenter_security_alerts_to_owner_enabled servicefabric_cluster_active_directory_authentication_enabled servicefabric_cluster_protection_level_as_encrypt_and_sign spring_cloud_service_network_injection_enabled sql_database_allow_internet_access sql_database_long_term_geo_redundant_backup_enabled sql_database_server_azure_defender_enabled sql_db_active_directory_admin_configured sql_db_public_network_access_disabled sql_server_atp_enabled sql_server_auditing_storage_account_destination_retention_90_days sql_server_audting_retention_period_90 sql_server_azure_ad_authentication_enabled sql_server_vm_azure_defender_enabled storage_account_blob_containers_public_access_private storage_account_blob_service_logging_enabled storage_account_block_public_access storage_account_default_network_access_rule_denied storage_account_encryption_at_rest_using_cmk storage_account_encryption_scopes_encrypted_at_rest_with_cmk storage_account_infrastructure_encryption_enabled storage_account_queue_services_logging_enabled storage_account_restrict_network_access storage_account_secure_transfer_required_enabled storage_account_trusted_microsoft_services_enabled storage_account_use_virtual_service_endpoint storage_account_uses_azure_resource_manager storage_account_uses_private_link storage_azure_defender_enabled storage_sync_private_link_used synapse_workspace_encryption_at_rest_using_cmk synapse_workspace_private_link_used

Query: sql_database_server_azure_defender_enabled

Usage

steampipe query terraform_azure_compliance.query.sql_database_server_azure_defender_enabled

Plugins & Tables

terraform_resource

Terraform plugin

SQL

select
  type || ' ' || name as resource,
  case
    when (arguments ->> 'tier') = 'Standard'
    and (arguments ->> 'resource_type') = 'SqlServers' then 'ok'
    else 'skip'
  end status,
  name || case
    when (arguments ->> 'tier') = 'Standard'
    and (arguments ->> 'resource_type') = 'SqlServers' then ' Azure defender enabled for SqlServer(s)'
    else ' Azure defender enabled for ' || (arguments ->> 'resource_type') || ''
  end || '.' reason,
  path || ':' || start_line
from
  terraform_resource
where
  type = 'azurerm_security_center_subscription_pricing';

Controls

The query is being used by the following controls:

sql_database_server_azure_defender_enabled