SQL server alert email disabled 이 페이지는 아직 한국어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우
언제든지 연락주시기 바랍니다. Id: terraform-azure-sql-server-alert-email-disabled
Provider: Azure
Platform: Terraform
Severity: Low
Category: Best Practices
Learn More Description SQL Server alert emails should be enabled to ensure that administrators are promptly notified of suspicious activities or potential security threats, such as SQL injection or data exfiltration attempts. Without setting the email_account_admins attribute to true in the azurerm_mssql_server_security_alert_policy resource, critical security alerts may go unnoticed, delaying incident response and potentially increasing the risk of a successful attack. A secure configuration is shown below:
resource "azurerm_mssql_server_security_alert_policy" "example" {
resource_group_name = azurerm_resource_group.example.name
server_name = azurerm_sql_server.example.name
state = "Enabled"
storage_endpoint = azurerm_storage_account.example.primary_blob_endpoint
storage_account_access_key = azurerm_storage_account.example.primary_access_key
disabled_alerts = [
"Sql_Injection",
"Data_Exfiltration"
]
retention_days = 20
email_account_admins = true
}
Enabling alert emails reduces the risk of missing critical security events by ensuring they are communicated in real time to account administrators.
Compliant Code Examples resource "azurerm_mssql_server_security_alert_policy" "negative" {
resource_group_name = azurerm_resource_group . example . name
server_name = azurerm_sql_server . example . name
state = "Enabled"
storage_endpoint = azurerm_storage_account . example . primary_blob_endpoint
storage_account_access_key = azurerm_storage_account . example . primary_access_key
disabled_alerts = [
"Sql_Injection" ,
"Data_Exfiltration"
]
retention_days = 20
email_account_admins = true
}
Non-Compliant Code Examples resource "azurerm_mssql_server_security_alert_policy" "positive1" {
resource_group_name = azurerm_resource_group . example . name
server_name = azurerm_sql_server . example . name
state = "Enabled"
storage_endpoint = azurerm_storage_account . example . primary_blob_endpoint
storage_account_access_key = azurerm_storage_account . example . primary_access_key
disabled_alerts = [
"Sql_Injection" ,
"Data_Exfiltration"
]
retention_days = 20
}
resource "azurerm_mssql_server_security_alert_policy" "positive2" {
resource_group_name = azurerm_resource_group . example . name
server_name = azurerm_sql_server . example . name
state = "Enabled"
storage_endpoint = azurerm_storage_account . example . primary_blob_endpoint
storage_account_access_key = azurerm_storage_account . example . primary_access_key
disabled_alerts = [
"Sql_Injection" ,
"Data_Exfiltration"
]
retention_days = 20
email_account_admins = false
}
