You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/defender-for-cloud/enable-defender-sql-at-scale.md
+13-12Lines changed: 13 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -12,9 +12,9 @@ ms.date: 07/14/2024
12
12
13
13
Microsoft Defender for Cloud's Defender for Databases plan provides security for SQL servers on virtual machines. In order to protect your databases, the Azure Monitoring Agent (AMA) must be implemented to prevent attacks and to identify configuration errors.
14
14
15
-
When you enable Defender for Databases, it automatically enables the auto provisioning process which configures of all the required agent components necessary for the plan to function. The auto provisioning process includes installation the configuration of the AMA, workspace configuration, and the virtusl machines (VM) extension and solution.
15
+
When you enable Defender for Databases, it automatically enables the auto provisioning process that configures of all the required agent components necessary for the plan to function. The auto provisioning process includes installation the configuration of the AMA, workspace configuration, and the virtual machines (VM) extension and solution.
16
16
17
-
This page explains how you can enable the auto-provisioning process for Defender for Databases across multiple subscriptions simultaneously using PowerShell. This process applies to SQL servers hosted on Azure VMs, on-premises environments, and Azure Arc-enabled SQL servers. You will also learn how to utilize additional functionalities that accommodate a variety of configurations, including:
17
+
This page explains how you can enable the autoprovisioning process for Defender for Databases across multiple subscriptions simultaneously using PowerShell. This process applies to SQL servers hosted on Azure VMs, on-premises environments, and Azure Arc-enabled SQL servers, and how to utilize extra functionalities that accommodate various configurations, including:
18
18
19
19
- Custom data collection rules
20
20
@@ -28,27 +28,27 @@ This page explains how you can enable the auto-provisioning process for Defender
28
28
29
29
- Gain knowledge on:
30
30
-[SQL server on VMs](https://azure.microsoft.com/products/virtual-machines/sql-server/)
31
-
-[SQL Server enabled by Azure Arc](/sql/sql-server/azure-arc/overview?view=sql-server-ver16)
31
+
-[SQL Server enabled by Azure Arc](/sql/sql-server/azure-arc/overview)
32
32
-[How to install Log Analytics agent on Windows computers](../azure-monitor/agents/agent-windows.md)
33
33
-[How to migrate to Azure Monitor Agent from Log Analytics agent](../azure-monitor/agents/azure-monitor-agent-migration.md)
34
34
35
35
-[Connect AWS accounts to Microsoft Defender for Cloud](quickstart-onboard-aws.md)
36
36
-[Connect your GCP project to Microsoft Defender for Cloud](quickstart-onboard-gcp.md)
37
37
38
-
- Install Powershell on [Windows](/powershell/scripting/install/installing-powershell-on-windows?view=powershell-7.4), [Linux](/powershell/scripting/install/installing-powershell-on-linux?view=powershell-7.4), [MacOS](/powershell/scripting/install/installing-powershell-on-macos?view=powershell-7.4), or [ARM](/powershell/scripting/install/powershell-on-arm?view=powershell-7.4).
39
-
-[Install the following Powershell modules](/powershell/module/powershellget/install-module?view=powershellget-3.x):
38
+
- Install PowerShell on [Windows](/powershell/scripting/install/installing-powershell-on-windows), [Linux](/powershell/scripting/install/installing-powershell-on-linux), [macOS](/powershell/scripting/install/installing-powershell-on-macos), or [ARM](/powershell/scripting/install/powershell-on-arm).
39
+
-[Install the following PowerShell modules](/powershell/module/powershellget/install-module):
40
40
- Az.Resources
41
41
- Az.OperationalInsights
42
42
- Az.Accounts
43
43
- Az
44
44
- Az.PolicyInsights
45
45
- Az.Security
46
46
47
-
- Permissions: requires VM contributor, contributor or owner rules.
47
+
- Permissions: requires VM contributor, contributor, or owner rules.
48
48
49
-
## Powershell script parameters and samples
49
+
## PowerShell script parameters and samples
50
50
51
-
The Powershell script that enables Microsoft Defender for SQL on Machines on a given subscription has several parameters that you can customize to fit your needs. The following table lists the parameters and their descriptions:
51
+
The PowerShell script that enables Microsoft Defender for SQL on Machines on a given subscription has several parameters that you can customize to fit your needs. The following table lists the parameters and their descriptions:
52
52
53
53
| Parameter name | Required | Description |
54
54
|--|--|--|
@@ -58,15 +58,15 @@ The Powershell script that enables Microsoft Defender for SQL on Machines on a g
58
58
| DataCollectionRuleResourceId | Optional | The resource ID of the data collection rule, if you want to use a custom DCR instead of the default one. |
59
59
| UserAssignedIdentityResourceId | Optional | The resource ID of the user assigned identity, if you want to use a custom user assigned identity instead of the default one. |
60
60
61
-
The following is a sample script for when you use a default Log Analytics workspace, data collection rule and managed identity.
61
+
The following sample script is applicable when you use a default Log Analytics workspace, data collection rule, and managed identity.
62
62
63
63
```powershell
64
64
Write-Host "------ Enable Defender for SQL on Machines example ------"
## Enable Defender for SQL servers on machines at scale
82
82
83
+
You can enable Defender for SQL servers on machines at scale by following these steps.
83
84
84
-
1. Open a Powershell window.
85
+
1. Open a PowerShell window.
85
86
86
87
1. Copy the [EnableDefenderForSqlOnMachines.ps1](https://github.com/Azure/Microsoft-Defender-for-Cloud/blob/fd04330a79a4bcd48424bf7a4058f44216bc40e4/Powershell%20scripts/Enable%20Defender%20for%20SQL%20servers%20on%20machines/EnableDefenderForSqlOnMachines.ps1) script.
0 commit comments