@@ -516,6 +516,20 @@ function Test-BlobAuditingOnDatabase
516
516
Assert-AreEqual $policy.RetentionInDays 8
517
517
Assert-True { $policy.StorageKeyType -eq " Primary" }
518
518
519
+ # Test - Tests setting blob auditing policy on a database with a storage account in a subscription which is different than the database's subscription
520
+ Set-AzureRmSqlDatabaseAuditing - State Enabled - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - StorageAccountName datasecpstests - AuditActionGroup " SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP" , " FAILED_DATABASE_AUTHENTICATION_GROUP" - RetentionInDays 8 - StorageAccountSubscriptionId b403f7d6- 87fb- 4a39- 8b34- b2172f985b78
521
+ $policy = Get-AzureRmSqlDatabaseAuditing - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
522
+
523
+ # Assert
524
+ Assert-AreEqual $policy.AuditState " Enabled"
525
+ Assert-AreEqual $policy.AuditActionGroup.Length 2
526
+ Assert-True {$policy.AuditActionGroup.Contains ([Microsoft.Azure.Commands.Sql.Auditing.Model.AuditActionGroups ]::SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP)}
527
+ Assert-True {$policy.AuditActionGroup.Contains ([Microsoft.Azure.Commands.Sql.Auditing.Model.AuditActionGroups ]::FAILED_DATABASE_AUTHENTICATION_GROUP)}
528
+ Assert-AreEqual $policy.AuditAction.Length 0
529
+ Assert-AreEqual $policy.RetentionInDays 8
530
+ Assert-True { $policy.StorageKeyType -eq " Primary" }
531
+ Assert-AreEqual $policy.StorageAccountSubscriptionId " b403f7d6-87fb-4a39-8b34-b2172f985b78"
532
+
519
533
# Test
520
534
Set-AzureRmSqlDatabaseAuditing - State Enabled - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - StorageAccountName $params.storageAccount - StorageKeyType " Secondary" - AuditActionGroup " SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP" , " FAILED_DATABASE_AUTHENTICATION_GROUP" - RetentionInDays 8 - AuditAction " UPDATE ON database::[$ ( $params.databaseName ) ] BY [public]"
521
535
$policy = Get-AzureRmSqlDatabaseAuditing - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
@@ -579,6 +593,19 @@ function Test-BlobAuditingOnServer
579
593
Assert-AreEqual $policy.RetentionInDays 8
580
594
Assert-AreEqual $policy.StorageKeyType " Primary"
581
595
596
+ # Test - Tests setting blob auditing policy on a server with a storage account in a subscription which is different than the server's subscription
597
+ Set-AzureRmSqlServerAuditing - State Enabled - ResourceGroupName $params.rgname - ServerName $params.serverName - StorageAccountName datasecpstests - AuditActionGroup " SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP" , " FAILED_DATABASE_AUTHENTICATION_GROUP" - RetentionInDays 8 - StorageAccountSubscriptionId b403f7d6- 87fb- 4a39- 8b34- b2172f985b78
598
+ $policy = Get-AzureRmSqlServerAuditing - ResourceGroupName $params.rgname - ServerName $params.serverName
599
+
600
+ # Assert
601
+ Assert-AreEqual $policy.AuditState " Enabled"
602
+ Assert-AreEqual $policy.AuditActionGroup.Length 2
603
+ Assert-True {$policy.AuditActionGroup.Contains ([Microsoft.Azure.Commands.Sql.Auditing.Model.AuditActionGroups ]::SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP)}
604
+ Assert-True {$policy.AuditActionGroup.Contains ([Microsoft.Azure.Commands.Sql.Auditing.Model.AuditActionGroups ]::FAILED_DATABASE_AUTHENTICATION_GROUP)}
605
+ Assert-AreEqual $policy.RetentionInDays 8
606
+ Assert-AreEqual $policy.StorageKeyType " Primary"
607
+ Assert-AreEqual $policy.StorageAccountSubscriptionId " b403f7d6-87fb-4a39-8b34-b2172f985b78"
608
+
582
609
# Test
583
610
Set-AzureRmSqlServerAuditing - State Enabled - ResourceGroupName $params.rgname - ServerName $params.serverName - StorageAccountName $params.storageAccount - StorageKeyType " Secondary" - AuditActionGroup " SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP" , " FAILED_DATABASE_AUTHENTICATION_GROUP" - RetentionInDays 8
584
611
$policy = Get-AzureRmSqlServerAuditing - ResourceGroupName $params.rgname - ServerName $params.serverName
0 commit comments