Ensure Azure SQL server audit log retention is greater than 90 days

** org.openrewrite.terraform.azure.EnsureAzureSQLServerAuditLogRetentionIsGreaterThan90Days** Ensure Azure SQL server audit log retention is greater than 90 days.
Tags
Azure
terraform
CKV_AZURE_24
Source
​Github, Issue Tracker, Maven Central​
groupId: org.openrewrite.recipe
artifactId: rewrite-terraform
version: 1.6.0
Usage
This recipe has no required configuration options and can be activated directly after taking a dependency on org.openrewrite.recipe:rewrite-terraform:1.6.0 in your build file:
Gradle
Maven
build.gradle
1
plugins {
2
    id("org.openrewrite.rewrite") version("5.22.2")
3
}
4
​
5
rewrite {
6
    activeRecipe("org.openrewrite.terraform.azure.EnsureAzureSQLServerAuditLogRetentionIsGreaterThan90Days")
7
}
8
​
9
repositories {
10
    mavenCentral()
11
}
12
​
13
dependencies {
14
    rewrite("org.openrewrite.recipe:rewrite-terraform:1.6.0")
15
}
Copied!
pom.xml
1
<project>
2
  <build>
3
    <plugins>
4
      <plugin>
5
        <groupId>org.openrewrite.maven</groupId>
6
        <artifactId>rewrite-maven-plugin</artifactId>
7
        <version>4.25.0</version>
8
        <configuration>
9
          <activeRecipes>
10
            <recipe>org.openrewrite.terraform.azure.EnsureAzureSQLServerAuditLogRetentionIsGreaterThan90Days</recipe>
11
          </activeRecipes>
12
        </configuration>
13
        <dependencies>
14
          <dependency>
15
            <groupId>org.openrewrite.recipe</groupId>
16
            <artifactId>rewrite-terraform</artifactId>
17
            <version>1.6.0</version>
18
          </dependency>
19
        </dependencies>
20
      </plugin>
21
    </plugins>
22
  </build>
23
</project>
Copied!
Recipes can also be activated directly from the command line by adding the argument -Drewrite.activeRecipesorg.openrewrite.terraform.azure.EnsureAzureSQLServerAuditLogRetentionIsGreaterThan90Days
Definition
Recipe List
Yaml Recipe List
​Add Terraform configuration​
resourceName: azurerm_sql_server
content: extended_auditing_policy { retention_in_days = 90 }
​Add Terraform configuration​
resourceName: azurerm_mssql_server
content: extended_auditing_policy { retention_in_days = 90 }
1
---
2
type: specs.openrewrite.org/v1beta/recipe
3
name: org.openrewrite.terraform.azure.EnsureAzureSQLServerAuditLogRetentionIsGreaterThan90Days
4
displayName: Ensure Azure SQL server audit log retention is greater than 90 days
5
description: Ensure Azure SQL server audit log retention is greater than 90 days.
6
tags:
7
  - Azure
8
  - terraform
9
  - CKV_AZURE_24
10
recipeList:
11
  - org.openrewrite.terraform.AddConfiguration:
12
      resourceName: azurerm_sql_server
13
      content: extended_auditing_policy {
14
  retention_in_days = 90
15
}
16
  - org.openrewrite.terraform.AddConfiguration:
17
      resourceName: azurerm_mssql_server
18
      content: extended_auditing_policy {
19
  retention_in_days = 90
20
}
Copied!

Ensure Azure SQL Server threat detection alerts are enabled for all threat types

Ensure Azure SQL server send alerts to field value is set

Last modified 5d ago

Export as PDF

Copy link

Contents