skip: update CI 297

epam · Sep 28, 2024 · b0b90cb · b0b90cb
1 parent e20b18f
commit b0b90cb
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 1 deletion.
diff --git a/auto_policy_testing/red/postgresql/postgresql_server.tf b/auto_policy_testing/red/postgresql/postgresql_server.tf
@@ -20,6 +20,7 @@ resource "azurerm_postgresql_server" "this" {
 
   threat_detection_policy {
     enabled = false
+    disabled_alerts = [ "Sql_Injection", "Sql_Injection_Vulnerability", "Access_Anomaly", "Data_Exfiltration", "Unsafe_Action"]
   }
 
   identity {

diff --git a/auto_policy_testing/red/sql/sql_managed_instance.tf b/auto_policy_testing/red/sql/sql_managed_instance.tf
@@ -18,4 +18,10 @@ resource "azurerm_mssql_managed_instance" "this" {
     azurerm_subnet_network_security_group_association.this,
     azurerm_subnet_route_table_association.this,
   ]
-}
+}
+
+resource "azurerm_mssql_managed_instance_security_alert_policy" "this" {
+  resource_group_name        = data.terraform_remote_state.common.outputs.resource_group
+  managed_instance_name      = azurerm_mssql_managed_instance.this.name
+  enabled                    = false
+}
diff --git a/auto_policy_testing/red/sql/sql_server.tf b/auto_policy_testing/red/sql/sql_server.tf
@@ -20,6 +20,12 @@ resource "azurerm_mssql_firewall_rule" "this" {
   end_ip_address   = "0.0.0.1"
 }
 
+resource "azurerm_mssql_server_security_alert_policy" "this" {
+  resource_group_name        = data.terraform_remote_state.common.outputs.resource_group
+  server_name                = azurerm_mssql_server.this.name
+  state                      = "Disabled"
+}
+
 resource "azurerm_mssql_server" "audit" {
   name                          = "${module.naming.resource_prefix.sql-server}-audit"
   location                      = data.terraform_remote_state.common.outputs.location