@@ -26,7 +26,7 @@ function Test-ThreatDetectionGetDefualtPolicy
26
26
try
27
27
{
28
28
# Test
29
- $policy = Get-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
29
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
30
30
31
31
# Assert
32
32
Assert-AreEqual $policy.ThreatDetectionState " Disabled"
@@ -35,7 +35,7 @@ function Test-ThreatDetectionGetDefualtPolicy
35
35
Assert-AreEqual $policy.ExcludedDetectionTypes.Count 0
36
36
37
37
# Test
38
- $policy = Get-AzSqlServerThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName
38
+ $policy = Get-AzSqlServerAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName
39
39
40
40
# Assert
41
41
Assert-AreEqual $policy.ThreatDetectionState " Disabled"
@@ -64,8 +64,8 @@ function Test-ThreatDetectionDatabaseUpdatePolicy
64
64
try
65
65
{
66
66
# Test
67
- Set-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName
$params.rgname - ServerName
$params.serverName - DatabaseName
$params.databaseName - NotificationRecipientsEmails
" [email protected] ;[email protected] " - EmailAdmins
$false - ExcludedDetectionType
" Sql_Injection_Vulnerability" - StorageAccountName
$params.storageAccount
68
- $policy = Get-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
67
+ Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName
$params.rgname - ServerName
$params.serverName - DatabaseName
$params.databaseName - NotificationRecipientsEmails
" [email protected] ;[email protected] " - EmailAdmins
$false - ExcludedDetectionType
" Sql_Injection_Vulnerability" - StorageAccountName
$params.storageAccount
68
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
69
69
70
70
# Assert
71
71
Assert-AreEqual $policy.ThreatDetectionState " Enabled"
@@ -76,8 +76,8 @@ function Test-ThreatDetectionDatabaseUpdatePolicy
76
76
Assert-True {$policy.ExcludedDetectionTypes.Contains ([Microsoft.Azure.Commands.Sql.ThreatDetection.Model.DetectionType ]::Sql_Injection_Vulnerability)}
77
77
78
78
# Test
79
- Set-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - ExcludedDetectionType " Sql_Injection" , " Sql_Injection_Vulnerability" , " Access_Anomaly" , " Data_Exfiltration" , " Unsafe_Action"
80
- $policy = Get-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
79
+ Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - ExcludedDetectionType " Sql_Injection" , " Sql_Injection_Vulnerability" , " Access_Anomaly" , " Data_Exfiltration" , " Unsafe_Action"
80
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
81
81
82
82
# Assert
83
83
Assert-AreEqual $policy.ThreatDetectionState " Enabled"
@@ -92,8 +92,8 @@ function Test-ThreatDetectionDatabaseUpdatePolicy
92
92
Assert-True {$policy.ExcludedDetectionTypes.Contains ([Microsoft.Azure.Commands.Sql.ThreatDetection.Model.DetectionType ]::Unsafe_Action)}
93
93
94
94
# Test
95
- Remove-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
96
- $policy = Get-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
95
+ Clear-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
96
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
97
97
98
98
# Assert
99
99
Assert-AreEqual $policy.ThreatDetectionState " Disabled"
@@ -107,8 +107,8 @@ function Test-ThreatDetectionDatabaseUpdatePolicy
107
107
Assert-True {$policy.ExcludedDetectionTypes.Contains ([Microsoft.Azure.Commands.Sql.ThreatDetection.Model.DetectionType ]::Unsafe_Action)}
108
108
109
109
# Test
110
- Set-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - ExcludedDetectionType " None"
111
- $policy = Get-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
110
+ Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - ExcludedDetectionType " None"
111
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
112
112
113
113
# Assert
114
114
Assert-AreEqual $policy.ThreatDetectionState " Enabled"
@@ -137,8 +137,8 @@ function Test-ThreatDetectionServerUpdatePolicy
137
137
try
138
138
{
139
139
# Test
140
- Set-AzSqlServerThreatDetectionPolicy - ResourceGroupName
$params.rgname - ServerName
$params.serverName - NotificationRecipientsEmails
" [email protected] ;[email protected] " - EmailAdmins
$false - ExcludedDetectionType Sql_Injection_Vulnerability
- StorageAccountName
$params.storageAccount
141
- $policy = Get-AzSqlServerThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName
140
+ Update-AzSqlServerAdvancedThreatProtectionSettings - ResourceGroupName
$params.rgname - ServerName
$params.serverName - NotificationRecipientsEmails
" [email protected] ;[email protected] " - EmailAdmins
$false - ExcludedDetectionType Sql_Injection_Vulnerability
- StorageAccountName
$params.storageAccount
141
+ $policy = Get-AzSqlServerAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName
142
142
143
143
# Assert
144
144
Assert-AreEqual $policy.ThreatDetectionState " Enabled"
@@ -148,8 +148,8 @@ function Test-ThreatDetectionServerUpdatePolicy
148
148
Assert-True {$policy.ExcludedDetectionTypes.Contains ([Microsoft.Azure.Commands.Sql.ThreatDetection.Model.DetectionType ]::Sql_Injection_Vulnerability)}
149
149
150
150
# Test
151
- Set-AzSqlServerThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - ExcludedDetectionType Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly, Data_Exfiltration, Unsafe_Action - StorageAccountName $params.storageAccount
152
- $policy = Get-AzSqlServerThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName
151
+ Update-AzSqlServerAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - ExcludedDetectionType Sql_Injection, Sql_Injection_Vulnerability, Access_Anomaly, Data_Exfiltration, Unsafe_Action - StorageAccountName $params.storageAccount
152
+ $policy = Get-AzSqlServerAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName
153
153
154
154
# Assert
155
155
Assert-AreEqual $policy.ThreatDetectionState " Enabled"
@@ -163,8 +163,8 @@ function Test-ThreatDetectionServerUpdatePolicy
163
163
Assert-True {$policy.ExcludedDetectionTypes.Contains ([Microsoft.Azure.Commands.Sql.ThreatDetection.Model.DetectionType ]::Unsafe_Action)}
164
164
165
165
# Test
166
- Remove-AzSqlServerThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName
167
- $policy = Get-AzSqlServerThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName
166
+ Clear-AzSqlServerAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName
167
+ $policy = Get-AzSqlServerAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName
168
168
169
169
# Assert
170
170
Assert-AreEqual $policy.ThreatDetectionState " Disabled"
@@ -178,8 +178,8 @@ function Test-ThreatDetectionServerUpdatePolicy
178
178
Assert-True {$policy.ExcludedDetectionTypes.Contains ([Microsoft.Azure.Commands.Sql.ThreatDetection.Model.DetectionType ]::Unsafe_Action)}
179
179
180
180
# Test
181
- Set-AzSqlServerThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - ExcludedDetectionType None - StorageAccountName $params.storageAccount
182
- $policy = Get-AzSqlServerThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName
181
+ Update-AzSqlServerAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - ExcludedDetectionType None - StorageAccountName $params.storageAccount
182
+ $policy = Get-AzSqlServerAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName
183
183
184
184
# Assert
185
185
Assert-AreEqual $policy.ThreatDetectionState " Enabled"
@@ -208,22 +208,22 @@ function Test-DisablingThreatDetection
208
208
try
209
209
{
210
210
# 1. Test
211
- Set-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - StorageAccountName $params.storageAccount - EmailAdmins $true
212
- $policy = Get-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
211
+ Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - StorageAccountName $params.storageAccount - EmailAdmins $true
212
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
213
213
214
214
# Assert
215
215
Assert-AreEqual $policy.ThreatDetectionState " Enabled"
216
216
217
217
# 2. Test
218
- Remove-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
219
- $policy = Get-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
218
+ Clear-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
219
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
220
220
221
221
# Assert
222
222
Assert-AreEqual $policy.ThreatDetectionState " Disabled"
223
223
224
224
# 3. Test - that no exception is thrown
225
- Set-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - StorageAccountName $params.storageAccount - EmailAdmins $true
226
- $policy = Get-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
225
+ Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - StorageAccountName $params.storageAccount - EmailAdmins $true
226
+ $policy = Get-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName
227
227
}
228
228
finally
229
229
{
@@ -246,17 +246,17 @@ function Test-InvalidArgumentsThreatDetection
246
246
try
247
247
{
248
248
# turning on threat detection without storage account
249
- Assert-Throws {Set-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName }
249
+ Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName }
250
250
251
251
# Check that NotificationRecipientsEmails are in correct format
252
- Assert-Throws {Set-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - NotificationRecipientsEmails " kokogmail.com" }
252
+ Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - NotificationRecipientsEmails " kokogmail.com" }
253
253
254
254
# Check that EmailAdmins is not False and NotificationRecipientsEmails is not empty
255
- Assert-Throws {Set-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - EmailAdmins $false - StorageAccountName $params.storageAccount }
256
- Assert-Throws {Set-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - EmailAdmins $false - NotificationRecipientsEmails " " - StorageAccountName $params.storageAccount }
255
+ Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - EmailAdmins $false - StorageAccountName $params.storageAccount }
256
+ Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - EmailAdmins $false - NotificationRecipientsEmails " " - StorageAccountName $params.storageAccount }
257
257
258
258
# Check that ExcludedDetectionType doesn't hold None and any other type
259
- Assert-Throws {Set-AzSqlDatabaseThreatDetectionPolicy - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - EmailAdmins $true - ExcludedDetectionType " None" , " Sql_Injection_Vulnerability" - StorageAccountName $params.storageAccount }
259
+ Assert-Throws {Update-AzSqlDatabaseAdvancedThreatProtectionSettings - ResourceGroupName $params.rgname - ServerName $params.serverName - DatabaseName $params.databaseName - EmailAdmins $true - ExcludedDetectionType " None" , " Sql_Injection_Vulnerability" - StorageAccountName $params.storageAccount }
260
260
}
261
261
finally
262
262
{
0 commit comments