Database Vulnerability Assessment Rule Baselines - Create Or Update

PUT https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/vulnerabilityaseessmenttest-4799/providers/Microsoft.Sql/servers/vulnerabilityaseessmenttest-6440/databases/testdb/vulnerabilityAssessments/default/rules/VA1001/baselines/default?api-version=2025-01-01

{
  "properties": {
    "baselineResults": [
      {
        "result": [
          "userA",
          "SELECT"
        ]
      },
      {
        "result": [
          "userB",
          "SELECT"
        ]
      },
      {
        "result": [
          "userC",
          "SELECT",
          "tableId_4"
        ]
      }
    ]
  }
}

import com.azure.resourcemanager.sql.fluent.models.DatabaseVulnerabilityAssessmentRuleBaselineInner;
import com.azure.resourcemanager.sql.models.DatabaseVulnerabilityAssessmentRuleBaselineItem;
import com.azure.resourcemanager.sql.models.VulnerabilityAssessmentName;
import com.azure.resourcemanager.sql.models.VulnerabilityAssessmentPolicyBaselineName;
import java.util.Arrays;

/**
 * Samples for DatabaseVulnerabilityAssessmentRuleBaselines CreateOrUpdate.
 */
public final class Main {
    /*
     * x-ms-original-file: 2025-01-01/DatabaseVulnerabilityAssessmentRuleBaselineCreate.json
     */
    /**
     * Sample code: Creates or updates a database's vulnerability assessment rule baseline.
     * 
     * @param manager Entry point to SqlServerManager.
     */
    public static void createsOrUpdatesADatabaseSVulnerabilityAssessmentRuleBaseline(
        com.azure.resourcemanager.sql.SqlServerManager manager) {
        manager.serviceClient().getDatabaseVulnerabilityAssessmentRuleBaselines().createOrUpdateWithResponse(
            "vulnerabilityaseessmenttest-4799", "vulnerabilityaseessmenttest-6440", "testdb",
            VulnerabilityAssessmentName.DEFAULT, "VA1001", VulnerabilityAssessmentPolicyBaselineName.DEFAULT,
            new DatabaseVulnerabilityAssessmentRuleBaselineInner().withBaselineResults(Arrays.asList(
                new DatabaseVulnerabilityAssessmentRuleBaselineItem().withResult(Arrays.asList("userA", "SELECT")),
                new DatabaseVulnerabilityAssessmentRuleBaselineItem().withResult(Arrays.asList("userB", "SELECT")),
                new DatabaseVulnerabilityAssessmentRuleBaselineItem()
                    .withResult(Arrays.asList("userC", "SELECT", "tableId_4")))),
            com.azure.core.util.Context.NONE);
    }
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

from azure.identity import DefaultAzureCredential

from azure.mgmt.sql import SqlManagementClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-sql
# USAGE
    python database_vulnerability_assessment_rule_baseline_create.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = SqlManagementClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.database_vulnerability_assessment_rule_baselines.create_or_update(
        resource_group_name="vulnerabilityaseessmenttest-4799",
        server_name="vulnerabilityaseessmenttest-6440",
        database_name="testdb",
        vulnerability_assessment_name="default",
        rule_id="VA1001",
        baseline_name="default",
        parameters={
            "properties": {
                "baselineResults": [
                    {"result": ["userA", "SELECT"]},
                    {"result": ["userB", "SELECT"]},
                    {"result": ["userC", "SELECT", "tableId_4"]},
                ]
            }
        },
    )
    print(response)


# x-ms-original-file: 2025-01-01/DatabaseVulnerabilityAssessmentRuleBaselineCreate.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

const { SqlManagementClient } = require("@azure/arm-sql");
const { DefaultAzureCredential } = require("@azure/identity");

/**
 * This sample demonstrates how to creates or updates a database's vulnerability assessment rule baseline.
 *
 * @summary creates or updates a database's vulnerability assessment rule baseline.
 * x-ms-original-file: 2025-01-01/DatabaseVulnerabilityAssessmentRuleBaselineCreate.json
 */
async function createsOrUpdatesADatabaseVulnerabilityAssessmentRuleBaseline() {
  const credential = new DefaultAzureCredential();
  const subscriptionId = "00000000-1111-2222-3333-444444444444";
  const client = new SqlManagementClient(credential, subscriptionId);
  const result = await client.databaseVulnerabilityAssessmentRuleBaselines.createOrUpdate(
    "vulnerabilityaseessmenttest-4799",
    "vulnerabilityaseessmenttest-6440",
    "testdb",
    "default",
    "VA1001",
    "default",
    {
      baselineResults: [
        { result: ["userA", "SELECT"] },
        { result: ["userB", "SELECT"] },
        { result: ["userC", "SELECT", "tableId_4"] },
      ],
    },
  );
  console.log(result);
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

using Azure;
using Azure.ResourceManager;
using System;
using System.Threading.Tasks;
using Azure.Core;
using Azure.Identity;
using Azure.ResourceManager.Sql.Models;
using Azure.ResourceManager.Sql;

// Generated from example definition: specification/sql/resource-manager/Microsoft.Sql/SQL/stable/2025-01-01/examples/DatabaseVulnerabilityAssessmentRuleBaselineCreate.json
// this example is just showing the usage of "DatabaseVulnerabilityAssessmentRuleBaselines_CreateOrUpdate" operation, for the dependent resources, they will have to be created separately.

// get your azure access token, for more details of how Azure SDK get your access token, please refer to https://learn.microsoft.com/en-us/dotnet/azure/sdk/authentication?tabs=command-line
TokenCredential cred = new DefaultAzureCredential();
// authenticate your client
ArmClient client = new ArmClient(cred);

// this example assumes you already have this SqlDatabaseVulnerabilityAssessmentRuleBaselineResource created on azure
// for more information of creating SqlDatabaseVulnerabilityAssessmentRuleBaselineResource, please refer to the document of SqlDatabaseVulnerabilityAssessmentRuleBaselineResource
string subscriptionId = "00000000-1111-2222-3333-444444444444";
string resourceGroupName = "vulnerabilityaseessmenttest-4799";
string serverName = "vulnerabilityaseessmenttest-6440";
string databaseName = "testdb";
VulnerabilityAssessmentName vulnerabilityAssessmentName = VulnerabilityAssessmentName.Default;
string ruleId = "VA1001";
VulnerabilityAssessmentPolicyBaselineName baselineName = VulnerabilityAssessmentPolicyBaselineName.Default;
ResourceIdentifier sqlDatabaseVulnerabilityAssessmentRuleBaselineResourceId = SqlDatabaseVulnerabilityAssessmentRuleBaselineResource.CreateResourceIdentifier(subscriptionId, resourceGroupName, serverName, databaseName, vulnerabilityAssessmentName, ruleId, baselineName);
SqlDatabaseVulnerabilityAssessmentRuleBaselineResource sqlDatabaseVulnerabilityAssessmentRuleBaseline = client.GetSqlDatabaseVulnerabilityAssessmentRuleBaselineResource(sqlDatabaseVulnerabilityAssessmentRuleBaselineResourceId);

// invoke the operation
DatabaseVulnerabilityAssessmentRuleBaselineData data = new DatabaseVulnerabilityAssessmentRuleBaselineData
{
    BaselineResults = { new DatabaseVulnerabilityAssessmentRuleBaselineItem(new string[] { "userA", "SELECT" }), new DatabaseVulnerabilityAssessmentRuleBaselineItem(new string[] { "userB", "SELECT" }), new DatabaseVulnerabilityAssessmentRuleBaselineItem(new string[] { "userC", "SELECT", "tableId_4" }) },
};
ArmOperation<SqlDatabaseVulnerabilityAssessmentRuleBaselineResource> lro = await sqlDatabaseVulnerabilityAssessmentRuleBaseline.UpdateAsync(WaitUntil.Completed, data);
SqlDatabaseVulnerabilityAssessmentRuleBaselineResource result = lro.Value;

// the variable result is a resource, you could call other operations on this instance as well
// but just for demo, we get its data from this resource instance
DatabaseVulnerabilityAssessmentRuleBaselineData resourceData = result.Data;
// for demo we just print out the id
Console.WriteLine($"Succeeded on id: {resourceData.Id}");

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue