Informazioni di riferimento sui comandi di PowerShell per la configurazione rapida

Importante

I comandi seguenti hanno come destinazione questa API unificata per la valutazione della vulnerabilità SQL e accettano una singola Azure -ResourceId per tutti e cinque i tipi di risorse supportati:

  • Microsoft.Sql/servers
  • Microsoft.Sql/managedInstances
  • Microsoft.Synapse/workspaces
  • Microsoft.Compute/virtualMachines (con il percorso figlio sqlServers/{instance}/databases/{db})
  • Microsoft.HybridCompute/machines (con il percorso figlio sqlServers/{instance}/databases/{db})

Impostazioni (Get / Set / Remove), avvio/interrogazione delle scansioni (Invoke-…Scan, Get-…ScanOperationResult) e lettura dei record di scansione (Get-…Scan, singola e in elenco) sono solo PaaS: non sono supportate su Microsoft.Compute/virtualMachines o Microsoft.HybridCompute/machines. Nelle risorse IaaS usare Get-SqlVulnerabilityAssessmentScanResult -ScanId 'latest' per leggere i dati di analisi.

I database di sistema in Istanza gestita (master, model, msdb) e Synapse (master) vengono indirizzati usando il relativo ID risorsa naturale (ad esempio …/managedInstances/{mi}/databases/master). Il modulo instrada in modo trasparente tali richieste all'URL a livello di istanza/area di lavoro con databaseName come parametro di query.

Documentazione dell'API di riferimento:

Questo articolo elenca i comandi di PowerShell che possono essere usati con la configurazione rapida della valutazione della vulnerabilità SQL.

Creare una copia locale dello script che si trova nel modulo wrapper di PowerShell per la configurazione rapida e salvare il file con il nome SqlVulnerabilityAssessmentCommands.psm1file seguente, a cui è possibile fare riferimento con i comandi seguenti:

Ottenere l'impostazione di valutazione della vulnerabilità di SQL

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentSetting -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"properties":{"state":"Enabled"},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/providers/Microsoft.Security/sqlVulnerabilityAssessments/default","name":"default","type":"Microsoft.Security/sqlVulnerabilityAssessments"}

Impostare l'impostazione di valutazione della vulnerabilità di SQL

Esempio 1: Abilitare l'impostazione di valutazione della vulnerabilità. Il wrapper costruisce il corpo della richiesta da -State.

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Set-SqlVulnerabilityAssessmentSetting -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest -State Enabled

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-writes, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : PUT
Content    : {"properties":{"state":"Enabled"},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/providers/Microsoft.Security/sqlVulnerabilityAssessments/default","name":"default","type":"Microsoft.Security/sqlVulnerabilityAssessments"}

Esempio 2: Disabilitare l'impostazione di valutazione della vulnerabilità.

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Set-SqlVulnerabilityAssessmentSetting -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest -State Disabled

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-writes, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : PUT
Content    : {"properties":{"state":"Disabled"},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/providers/Microsoft.Security/sqlVulnerabilityAssessments/default","name":"default","type":"Microsoft.Security/sqlVulnerabilityAssessments"}

Rimuovere l'impostazione di valutazione della vulnerabilità di SQL

Esempio illustrato per una risorsa Istanza gestita di SQL.

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Remove-SqlVulnerabilityAssessmentSetting -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/managedInstances/vulnerabilityaseessmentmi

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-deletes, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : DELETE
Content    :

Avviare l'analisi di valutazione delle vulnerabilità di SQL

Esempio 1: Fire-and-Forget. Il wrapper restituisce un oggetto pscustomobject che espone l'intestazione Location e l'oggetto OperationId analizzato, di cui è possibile effettuare il polling in un secondo momento con Get-SqlVulnerabilityAssessmentScanOperationResult.

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Invoke-SqlVulnerabilityAssessmentScan -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db

Results:

Headers     : {[Cache-Control, System.String[]], [Pragma, System.String[]], [x-ms-request-id, System.String[]], [Location, System.String[]]…}
Version     : 1.1
StatusCode  : 202
Method      : POST
Location    : https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/scanOperationResults/9e2c1b3a-4d6f-4d8b-9b88-3c2e9a7e0a11?api-version=2026-04-01-preview
OperationId : 9e2c1b3a-4d6f-4d8b-9b88-3c2e9a7e0a11

Esempio 2: avviare un'analisi e attendere che raggiunga uno stato terminale. Con -Wait, il wrapper esegue il polling dell'operazione di analisi e, una volta raggiunto lo stato del terminale, recupera il record di analisi più recente in modo da ottenere il riepilogo completo dell'analisi (tipo di trigger, stato, ora di inizio/fine, conteggi delle regole, flag applicato alla baseline, ...). Il cmdlet restituisce un oggetto pscustomobject con ScanStatus (la stringa di stato del terminale) e Scan (il record di analisi deserializzato).

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
$r = Invoke-SqlVulnerabilityAssessmentScan -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -Wait -PollIntervalSeconds 5 -TimeoutSeconds 600
$r.ScanStatus
$r.Scan.properties

Results:

ScanStatus : Passed
Scan       : @{properties=@{triggerType=OnDemand; state=Passed; startTime=2026-06-02T12:00:01Z;
              endTime=2026-06-02T12:00:48Z; scanStatus=Passed; isBaselineApplied=True;
              numberOfFailedSecurityChecks=0; server=vulnerabilityaseessmenttest; database=db};
              id=/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/Scheduled-20260602;
              name=Scheduled-20260602; type=Microsoft.Security/sqlVulnerabilityAssessments/scans}

Ottieni l'analisi della valutazione delle vulnerabilità SQL

Esempio 1: Elenca tutte le scansioni registrate per un database Azure SQL.

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentScan -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"value":[{"properties":{"triggerType":"OnDemand","state":"Passed","scanStatus":"Passed","isBaselineApplied":true,"numberOfFailedSecurityChecks":0},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/Scheduled-20260602","name":"Scheduled-20260602","type":"Microsoft.Security/sqlVulnerabilityAssessments/scans"}]}

Esempio 2: ottenere l'analisi più recente per un pool Synapse SQL. Il wrapper accetta il letterale -ScanId 'latest' per eseguire il drill-down nel record della scansione più recente.

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentScan -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Synapse/workspaces/vaSynapseWs/sqlPools/pool1 -ScanId 'latest'

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"properties":{"triggerType":"OnDemand","state":"Passed","scanStatus":"Passed","isBaselineApplied":true,"numberOfFailedSecurityChecks":2},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Synapse/workspaces/vaSynapseWs/sqlPools/pool1/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/latest","name":"latest","type":"Microsoft.Security/sqlVulnerabilityAssessments/scans"}

Ottieni il risultato dell'operazione di analisi di valutazione delle vulnerabilità SQL

Esegue il polling di un'analisi in anteprima avviata da Invoke-SqlVulnerabilityAssessmentScan.

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentScanOperationResult -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -OperationId 9e2c1b3a-4d6f-4d8b-9b88-3c2e9a7e0a11

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"properties":{"scanStatus":"InProgress","startTime":"2026-06-02T12:00:01Z"},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/scanOperationResults/9e2c1b3a-4d6f-4d8b-9b88-3c2e9a7e0a11","name":"9e2c1b3a-4d6f-4d8b-9b88-3c2e9a7e0a11","type":"Microsoft.Security/sqlVulnerabilityAssessments/scans/scanOperationResults"}

Ottenere il risultato dell'analisi della valutazione della vulnerabilità di SQL

Example 1: elencare ogni risultato della regola per una determinata analisi in un database Azure SQL.

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentScanResult -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -ScanId 'latest'

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"value":[{"properties":{"ruleId":"VA2062","status":"NonFinding","isTrimmed":false},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/latest/scanResults/VA2062","name":"VA2062","type":"Microsoft.Security/sqlVulnerabilityAssessments/scans/scanResults"},{"properties":{"ruleId":"VA2065","status":"Finding","isTrimmed":false},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/latest/scanResults/VA2065","name":"VA2065","type":"Microsoft.Security/sqlVulnerabilityAssessments/scans/scanResults"}]}

Esempio 2: analizzare nel dettaglio una singola regola non riuscita su una SQL VM. L'ID risorsa della macchina virtuale usa il percorso figlio Microsoft.Compute/virtualMachines/{vm}/sqlServers/{instance}/databases/{db}.

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentScanResult -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Compute/virtualMachines/vaSqlVm/sqlServers/MSSQLSERVER/databases/db -ScanId 'latest' -RuleId VA2065

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"properties":{"ruleId":"VA2065","status":"Finding","isTrimmed":false,"queryResults":[["dbo","db_owner"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Compute/virtualMachines/vaSqlVm/sqlServers/MSSQLSERVER/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/scans/latest/scanResults/VA2065","name":"VA2065","type":"Microsoft.Security/sqlVulnerabilityAssessments/scans/scanResults"}

Ottenere la baseline di valutazione della vulnerabilità di SQL

Elenca le regole di base attualmente configurate per un database (uno dei cinque tipi di risorse supportati).

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentBaseline -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"value":[{"properties":{"results":[["True"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1143","name":"VA1143","type":"Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"},{"properties":{"results":[["False"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1219","name":"VA1219","type":"Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"}]}

Aggiungere una baseline di valutazione della vulnerabilità SQL

Esempio 1: creare la baseline a partire dall'analisi più recente inviando latestScan = true con un oggetto results vuoto.

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Add-SqlVulnerabilityAssessmentBaseline -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -Body '{ "latestScan": true, "results": {} }'

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-writes, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : POST
Content    : {"value":[{"properties":{"results":[["True"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1143","name":"VA1143","type":"Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"}]}

Esempio 2: inizializzare la baseline con risultati espliciti delle regole: utile per le baseline dichiarative e idempotenti.

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Add-SqlVulnerabilityAssessmentBaseline -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -Body '{
  "latestScan": false,
  "results": {
    "VA2062": [
      [
        "AllowAll",
        "0.0.0.0",
        "255.255.255.255"
      ]
    ]
  }
}'

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-writes, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : POST
Content    : {"value":[{"properties":{"results":[["AllowAll","0.0.0.0","255.255.255.255"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA2062","name":"VA2062","type":"Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"}]}

Ottenere una regola di base per la valutazione della vulnerabilità SQL

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Get-SqlVulnerabilityAssessmentBaselineRule -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -RuleId VA2062

Results:

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-reads, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : GET
Content    : {"properties":{"results":[["AllowAll","0.0.0.0","255.255.255.255"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA2062","name":"VA2062","type":"Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"}

Impostare la regola di base per la valutazione della vulnerabilità SQL

Creare o sostituire una singola regola di base. Il -Body viene inviato letteralmente, in modo che corrisponda alla forma standard properties.results.

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Set-SqlVulnerabilityAssessmentBaselineRule -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db -RuleId VA2062 -Body '{
  "latestScan": false,
  "results": [
    [
      "AllowAll",
      "0.0.0.0",
      "255.255.255.255"
    ]
  ]
}'

Headers    : {[Cache-Control, System.String[]], [Pragma, System.String[]], [x-ms-request-id, System.String[]], [Server, System.String[]]…}
Version    : 1.1
StatusCode : 200
Method     : PUT
Content    : {"properties":{"results":[["AllowAll","0.0.0.0","255.255.255.255"]]},"id":"/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA2062","name":"VA2062","type":"Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"}

Rimuovere la regola di base per la valutazione della vulnerabilità sql

Esempio illustrato per un database SQL Server abilitato per Azure Arc. Gli ID risorsa di Arc utilizzano il percorso figlio Microsoft.HybridCompute/machines/{machine}/sqlServers/{instance}/databases/{db}.

Connect-AzAccount -Subscription 00000000-1111-2222-3333-444444444444
Import-Module .\SqlVulnerabilityAssessmentCommands.psm1
Remove-SqlVulnerabilityAssessmentBaselineRule -ResourceId /subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttestRg/providers/Microsoft.HybridCompute/machines/vaSqlArc/sqlServers/MSSQLSERVER/databases/db -RuleId VA2062

Headers    : {[Pragma, System.String[]], [x-ms-request-id, System.String[]], [x-ms-ratelimit-remaining-subscription-deletes, System.String[]], [x-ms-correlation-request-id, System.String[]]...}
Version    : 1.1
StatusCode : 200
Method     : DELETE
Content    :

Passaggi successivi

Individuazione e correzione della vulnerabilità nei database SQL di Azure

  • Last updated on