Prisma Cloud Remediation - Azure SQL Database Misconfiguration

This playbook remediates the following Prisma Cloud Azure SQL database alerts. Prisma Cloud policies remediated: - Azure SQL database auditing is disabled - Azure SQL Database with Auditing Retention less than 90 days - Azure Threat Detection on SQL databases is set to Off - Azure SQL Database with Threat Retention less than or equals to 90 days

Prisma Cloud by Palo Alto Networks · 9 tasks · 1 input · 0 outputs

Inputs

  • policyId — Prisma Cloud policy Id.

Commands used

azure-sql-db-audit-policy-create-update azure-sql-db-threat-policy-create-update

Flowchart

auditPolicy threatPolicy yes Start Start Done Done Execute remediation Execute remediation Manually update SQL database settings Manually update SQL datab... Auditing is disabled Auditing is disabled Is Azure SQL Management integration enabled? - IsIntegrationAvailable Is Azure SQL Management i... IsIntegrationAvailable Threat Detection set to off Threat Detection set to off Enable auditing with 90 day retention - azure-sql-db-audit-policy-create-update Enable auditing with 90 d... azure-sql-db-audit-policy-cre... Enable threat detection with 90 day retention - azure-sql-db-threat-policy-create-update Enable threat detection w... azure-sql-db-threat-policy-cr...