CmdID / az / az security / az security va / az security va sql / az security va sql baseline
az security va sql baseline add
Set a list of baseline rules. Azure CLI reference
Will overwrite any previously existing results (for all rules).
3 examples 4 options Its page in the Azure CLI reference
Examples
Set baseline for all rules on an Azure SQL database using the latest scan results.
az security va sql baseline add --resource-id /subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Sql/servers/{server}/databases/{db} --latest-scan trueIdentify--resource-idThe fully qualified Azure Resource manager identifier of the resource.--latest-scanTake results from latest scan.Set baseline for multiple rules with explicit results on a SQL DB hosted on an Azure VM.
az security va sql baseline add --resource-id /subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Compute/virtualMachines/{vm} --database-name MyDb --results '{"VA1234":[["col1","col2"],["col3","col4"]],"VA5678":[["user1","SELECT"]]}'Identify--resource-idThe fully qualified Azure Resource manager identifier of the resource.--database-nameThe name of the database to assess.--resultsExpected results to be inserted into the baseline.Set baseline at the server level using latest scan results (system database 'master').
az security va sql baseline add --resource-id /subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Sql/servers/{server} --database-name master --latest-scan trueIdentify--resource-idThe fully qualified Azure Resource manager identifier of the resource.--database-nameThe name of the database to assess.--latest-scanTake results from latest scan.Options
--database-nameThe name of the database to assess.--latest-scanTake results from latest scan.--resource-idThe fully qualified Azure Resource manager identifier of the resource.--resultsExpected results to be inserted into the baseline.