@@ -26,7 +26,7 @@ function Test-ThreatDetectionGetDefaultPolicy
26
26
try
27
27
{
28
28
# Test
29
- $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
29
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
30
30
31
31
# Assert
32
32
Assert-AreEqual $policy.ThreatDetectionState " Disabled"
@@ -35,7 +35,7 @@ function Test-ThreatDetectionGetDefaultPolicy
35
35
Assert-AreEqual $policy.ExcludedDetectionTypes.Count 0
36
36
37
37
# Test
38
- $policy = Get-AzSqlServerAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName
38
+ $policy = Get-AzSqlServerAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName
39
39
40
40
# Assert
41
41
Assert-AreEqual $policy.ThreatDetectionState " Disabled"
@@ -64,8 +64,8 @@ function Test-ThreatDetectionDatabaseUpdatePolicy
64
64
try
65
65
{
66
66
# Test upsert of TD policy without admins or an email accoun
67
- Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - StorageAccountName $params.storageAccount
68
- $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
67
+ Update-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - StorageAccountName $params.storageAccount
68
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
69
69
70
70
# Assert
71
71
Assert-AreEqual $policy.ThreatDetectionState " Enabled"
@@ -75,8 +75,8 @@ function Test-ThreatDetectionDatabaseUpdatePolicy
75
75
Assert-AreEqual $policy.StorageAccountName $params.storageAccount
76
76
77
77
# Test
78
- Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName
$params.rgname - ServerName
$params.serverName - DatabaseName
$params.databaseName - NotificationRecipientsEmails
" [email protected] ;[email protected] " - EmailAdmins
$false - ExcludedDetectionType
" Sql_Injection_Vulnerability" - StorageAccountName
$params.storageAccount
79
- $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
78
+ Update-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName
$params.rgname - ServerName
$params.serverName - DatabaseName
$params.databaseName - NotificationRecipientsEmails
" [email protected] ;[email protected] " - EmailAdmins
$false - ExcludedDetectionType
" Sql_Injection_Vulnerability" - StorageAccountName
$params.storageAccount
79
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
80
80
81
81
# Assert
82
82
Assert-AreEqual $policy.ThreatDetectionState " Enabled"
@@ -87,8 +87,8 @@ function Test-ThreatDetectionDatabaseUpdatePolicy
87
87
Assert-True {$policy.ExcludedDetectionTypes.Contains ([Microsoft.Azure.Commands.Sql.ThreatDetection.Model.DetectionType ]::Sql_Injection_Vulnerability)}
88
88
89
89
# Test
90
- Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - ExcludedDetectionType " Sql_Injection_Vulnerability" , " Unsafe_Action" , " Brute_Force"
91
- $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
90
+ Update-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - ExcludedDetectionType " Sql_Injection_Vulnerability" , " Unsafe_Action" , " Brute_Force"
91
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
92
92
93
93
# Assert
94
94
Assert-AreEqual $policy.ThreatDetectionState " Enabled"
@@ -101,8 +101,8 @@ function Test-ThreatDetectionDatabaseUpdatePolicy
101
101
Assert-True {$policy.ExcludedDetectionTypes.Contains ([Microsoft.Azure.Commands.Sql.ThreatDetection.Model.DetectionType ]::Brute_Force)}
102
102
103
103
# Test
104
- Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - ExcludedDetectionType " Sql_Injection" , " Sql_Injection_Vulnerability" , " Access_Anomaly" , " Data_Exfiltration" , " Unsafe_Action" , " Brute_Force"
105
- $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
104
+ Update-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - ExcludedDetectionType " Sql_Injection" , " Sql_Injection_Vulnerability" , " Access_Anomaly" , " Data_Exfiltration" , " Unsafe_Action" , " Brute_Force"
105
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
106
106
107
107
# Assert
108
108
Assert-AreEqual $policy.ThreatDetectionState " Enabled"
@@ -118,8 +118,8 @@ function Test-ThreatDetectionDatabaseUpdatePolicy
118
118
Assert-True {$policy.ExcludedDetectionTypes.Contains ([Microsoft.Azure.Commands.Sql.ThreatDetection.Model.DetectionType ]::Brute_Force)}
119
119
120
120
# Test
121
- Clear-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
122
- $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
121
+ Clear-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
122
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
123
123
124
124
# Assert
125
125
Assert-AreEqual $policy.ThreatDetectionState " Disabled"
@@ -134,8 +134,8 @@ function Test-ThreatDetectionDatabaseUpdatePolicy
134
134
Assert-True {$policy.ExcludedDetectionTypes.Contains ([Microsoft.Azure.Commands.Sql.ThreatDetection.Model.DetectionType ]::Brute_Force)}
135
135
136
136
# Test
137
- Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - ExcludedDetectionType " None"
138
- $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
137
+ Update-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - ExcludedDetectionType " None"
138
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
139
139
140
140
# Assert
141
141
Assert-AreEqual $policy.ThreatDetectionState " Enabled"
@@ -247,22 +247,22 @@ function Test-DisablingThreatDetection
247
247
try
248
248
{
249
249
# 1. Test
250
- Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - StorageAccountName $params.storageAccount - EmailAdmins $true
251
- $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
250
+ Update-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - StorageAccountName $params.storageAccount - EmailAdmins $true
251
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
252
252
253
253
# Assert
254
254
Assert-AreEqual $policy.ThreatDetectionState " Enabled"
255
255
256
256
# 2. Test
257
- Clear-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
258
- $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
257
+ Clear-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
258
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
259
259
260
260
# Assert
261
261
Assert-AreEqual $policy.ThreatDetectionState " Disabled"
262
262
263
263
# 3. Test - that no exception is thrown
264
- Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - StorageAccountName $params.storageAccount - EmailAdmins $true
265
- $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
264
+ Update-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - StorageAccountName $params.storageAccount - EmailAdmins $true
265
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
266
266
}
267
267
finally
268
268
{
@@ -285,17 +285,17 @@ function Test-InvalidArgumentsThreatDetection
285
285
try
286
286
{
287
287
# turning on threat detection without storage account
288
- Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName }
288
+ Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName }
289
289
290
290
# Check that NotificationRecipientsEmails are in correct format
291
- Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - NotificationRecipientsEmails " kokogmail.com" }
291
+ Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - NotificationRecipientsEmails " kokogmail.com" }
292
292
293
293
# Check that EmailAdmins is not False and NotificationRecipientsEmails is not empty
294
- Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - EmailAdmins $false - StorageAccountName $params.storageAccount - StoragEndPoint $params.storageEndpoint }
295
- Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - EmailAdmins $false - NotificationRecipientsEmails " " - StorageAccountName $params.storageAccount - StoragEndPoint $params.storageEndpoint }
294
+ Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - EmailAdmins $false - StorageAccountName $params.storageAccount - StoragEndPoint $params.storageEndpoint }
295
+ Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - EmailAdmins $false - NotificationRecipientsEmails " " - StorageAccountName $params.storageAccount - StoragEndPoint $params.storageEndpoint }
296
296
297
297
# Check that ExcludedDetectionType doesn't hold None and any other type
298
- Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - EmailAdmins $true - ExcludedDetectionType " None" , " Sql_Injection_Vulnerability" - StorageAccountName $params.storageAccount }
298
+ Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSetting - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - EmailAdmins $true - ExcludedDetectionType " None" , " Sql_Injection_Vulnerability" - StorageAccountName $params.storageAccount }
299
299
}
300
300
finally
301
301
{
0 commit comments